Privacy Policy

Last updated: 20 August 2026

Showerling (“we”, “us”) is an Australian-run service for creating baby shower websites. We handle personal information in line with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This page explains what we collect, why, and your choices — in plain English, because nobody planning a baby shower has time for anything else.

What we collect

From hosts (our customers):

• Your email address (for your account, login links and receipts).
• The content you add to your site: names, your story, event details, venue, registry items and theme choices.
• Payment is handled entirely by Stripe — we never see or store your card details.

From guests visiting a shower site:

• RSVP details they choose to submit: name, party size, dietary needs, an optional email and message.
• Gift claims (name, and whether they want it shown publicly), guestbook notes, game answers and scores, and baby predictions.

We don't use advertising trackers or analytics cookies on shower sites. The only cookies we set are the ones that keep a host logged in to their dashboard.

Why we collect it

• To run your shower site: show RSVPs, coordinate the registry, score the games, deliver the guestbook.
• To email you login links, your receipt, and service messages about your event.
• To respond when you contact us.

We do not sell personal information, share it with advertisers, or use guest details for marketing. Guest information is only ever shown to the host of that event (and, where guests choose — like a public gift claim or an approved guestbook note — on that event's page).

Where it's stored, and overseas disclosure (APP 8)

Event data lives in our database hosted in Sydney, Australia (Supabase). Some service providers we rely on process limited data overseas: our web host (Vercel, global/US), our email provider (Resend, with mail infrastructure in Japan and the US) which processes email addresses to deliver messages, and Stripe (US/global) for payments. If a host uses the optional AI registry drafting, only non-personal event basics (country, baby's sex if announced, due month) are sent to OpenAI (US) — never guest details.

How long we keep it

Shower sites are designed for a season, not forever. Your site and its guest data are kept for the life of your event site (around 6 months from purchase, or longer if we extend it for you), then deleted. You can ask us to delete your event and its data at any time and we'll do it promptly.

Security

Data is encrypted in transit (HTTPS everywhere), database access is restricted to our servers, guest pages are unlisted rather than searchable, and hosts control what appears publicly. No system is perfect, but we keep the attack surface deliberately small — no guest accounts, no stored passwords (hosts log in by emailed magic link), no card details.

Access, correction and deletion (APPs 12 & 13)

Hosts can see and edit almost everything from their dashboard. For anything else — a copy of your information, a correction, or deletion (including guests who'd like their RSVP or note removed) — email hello@showerling.com or use the contact form. We'll respond within 30 days, usually much faster.

Complaints

If you think we've mishandled your information, contact us first and we'll do our best to put it right. If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Changes

If we change this policy, we'll update this page and the date at the top. Significant changes will be emailed to active hosts.

Questions? hello@showerling.com · Terms of Service