Privacy Policy

Last updated: 22 September 2026

Showerling (“we”, “us”) is an Australian-run service for creating baby shower websites. We handle personal information in line with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This page explains what we collect, why, and your choices — in plain English, because nobody planning a baby shower has time for anything else.

What we collect

From hosts (our customers):

• Your email address (for your account, login links and receipts).
• The content you add to your site: names, your story, event details, venue, registry items and theme choices.
• Payment is handled entirely by Stripe — we never see or store your card details.

From guests visiting a shower site:

• RSVP details they choose to submit: name, party size, dietary needs, an optional email and message.
• Gift claims (name, and whether they want it shown publicly), guestbook notes, game answers and scores, and baby predictions.

On our marketing pages (showerling.com and its public pages — never on a shower site) we use Google Analytics, Vercel Analytics, and the Meta and TikTok advertising pixels. These tell us which pages people visit, and which of our ads brought them here. Google, Meta and TikTok receive the pages you viewed on those pages, your IP address and cookie identifiers; Meta and TikTok may match that to your account with them if you have one. If you buy, we also tell Meta and TikTok that a purchase happened, with its amount and a one-way scrambled (hashed) form of your email address — they can check it against an address they already hold, but can't read it. We use all of this to measure and improve our advertising — we don't build profiles of you, and we don't upload lists of people to them.

Shower sites carry none of it. No analytics, no advertising pixels, no third-party cookies. A guest who opens a host's link is not measured by us or by anyone else, and nothing a guest does there is ever used for advertising. The same goes for the host dashboard. The only cookies we set anywhere are the ones that keep a host logged in.

You can turn the advertising measurement off for this browser on our privacy choices page. It is already off if you are visiting from the UK or Europe, or if your browser sends a Global Privacy Control signal — in those cases no advertising pixel is loaded at all.

You can also turn it off at the source: Meta's is under Settings → Ads on Facebook or Instagram, TikTok's under Settings → Privacy → Ads, Google's under Google Account → Data & privacy → Ad settings. Blocking third-party cookies or using a tracker-blocking browser stops both, and nothing on our site needs them to work.

Why we collect it

• To run your shower site: show RSVPs, coordinate the registry, score the games, deliver the guestbook.
• To email you login links, your receipt, and service messages about your event.
• To respond when you contact us.

We never sell personal information. Guest details — RSVPs, gift claims, guestbook notes, game answers, predictions — are never used for marketing and never shared with advertisers; the advertising measurement described above covers visitors to our marketing pages only, and never reaches a shower site. Guest information is only ever shown to the host of that event (and, where guests choose — like a public gift claim or an approved guestbook note — on that event's page).

Where it's stored, and overseas disclosure (APP 8)

Event data lives in our database hosted in Sydney, Australia (Supabase). Some service providers we rely on process limited data overseas: our web host and its analytics (Vercel, global/US), Google Analytics, Meta and TikTok (US/global) for the marketing-page measurement described above, our email provider (Resend, with mail infrastructure in Japan and the US) which processes email addresses to deliver messages, and Stripe (US/global) for payments. If a host uses the optional AI registry drafting, only non-personal event basics (country, baby's sex if announced, due month) are sent to OpenAI (US) — never guest details.

How long we keep it

Your site and its contents are kept for as long as you keep the site — a guestbook full of notes written to your child shouldn't be deleted on a timer, so we don't. You can ask us to close your site or delete it and its data at any time and we'll do it promptly. Guests can ask us to remove their own RSVP, note or photo the same way, and hosts can delete any note or claim from their dashboard themselves.

Security

Data is encrypted in transit (HTTPS everywhere), database access is restricted to our servers, guest pages are unlisted rather than searchable, and hosts control what appears publicly. No system is perfect, but we keep the attack surface deliberately small — no guest accounts, no stored passwords (hosts log in by emailed one-time code), no card details.

Access, correction and deletion (APPs 12 & 13)

Hosts can see and edit almost everything from their dashboard. For anything else — a copy of your information, a correction, or deletion (including guests who'd like their RSVP or note removed) — email hello@showerling.com or use the contact form. We'll respond within 30 days, usually much faster.

Complaints

If you think we've mishandled your information, contact us first and we'll do our best to put it right. If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Changes

If we change this policy, we'll update this page and the date at the top. Significant changes will be emailed to active hosts.

Questions? hello@showerling.com · Terms of Service