Privacy Policy

Last updated: September 23, 2026

This Privacy Policy explains how Confetti Drop (“Confetti Drop,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you use the Confetti Drop mobile application, the website at confettidrop.app, and related services (together, the “Service”). By using the Service, you agree to this Policy. If you do not agree, do not use the Service.

This document is provided for transparency and App Store compliance. It is not legal advice. Contact hello@confettidrop.app with privacy questions.

1. Who we are

Confetti Drop is an independent product operated from the United States. Primary contact for privacy and safety: hello@confettidrop.app.

2. Information we collect

Account and profile

When you sign in, we collect your email address and the display name you provide. We may also store an optional profile photo or avatar path you upload. Sign-in uses email one-time codes (OTP) delivered by email; we do not require a password for the current App Store version.

Drop and contribution content

Organizers create Drops (titles, occasion details, themes, reveal timing, invite settings, wishlist items, and related metadata). Invitees and members may submit messages, photos, and other contribution content you choose to share. We store who contributed, when, and moderation status (for example approved, flagged, or hidden).

Guest / web invite activity

If you leave a message or photo on an invite page without creating an account, we may store a guest identifier on your device or browser, the invite token you used, and the content you submit so it can appear in the Drop.

Safety and support

If you report content, block a user, or contact us, we collect the information you submit (including report reasons and the content or account reported) so we can review and respond.

Technical and diagnostics

We and our infrastructure providers may process IP address, device/app version, approximate timestamps for authentication and API requests, crash or error diagnostics, and similar logs needed to operate, secure, and debug the Service. We do not use this information for cross-app advertising or tracking across other companies’ apps and websites.

What we do not collect in the current version

Cash gift / payment card data is not collected in the current App Store version (funds features are off). We do not sell personal information. We do not run third-party advertising networks inside the app today.

3. How we use information

4. How sharing works inside Confetti Drop

Content in a Drop is visible to people the organizer invites or adds, subject to Drop privacy and surprise settings. After reveal, content may be shown to the recipient and other members as designed for that Drop. Organizers choose who receives invite links; anyone with a link may be able to view invite pages and contribute, so share links carefully.

5. Service providers

We use trusted processors who handle data only to run Confetti Drop, for example:

These providers process data under their own security practices and contractual terms with us. We do not sell your personal information to data brokers.

6. Retention

We keep account and Drop data while your account is active and the Drop exists. After account deletion, we remove or anonymize personal data as described below. Backups and security logs may retain residual copies for a limited period. Report and moderation records may be retained as needed to enforce safety rules and legal obligations.

7. Your choices and rights

Depending on where you live (for example certain U.S. states or the EEA/UK), you may have additional rights under applicable law. Contact us to exercise them. We may need to verify your request.

8. Children

Confetti Drop is intended for celebrations among teens and adults and is designed for a general audience with user-generated content controls. You must be at least 13 years old to create an account. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information, contact hello@confettidrop.app and we will take appropriate steps to delete it.

9. Security

We use industry-standard measures appropriate to our size and stage, including encrypted transport (HTTPS), access controls on our database, and authenticated APIs. No method of transmission or storage is 100% secure. Please use a mailbox only you control for sign-in codes, and do not share OTP codes.

10. International transfers

We and our providers may process data in the United States and other countries. If you use the Service from outside the U.S., you understand your information may be transferred to and processed in jurisdictions that may have different data protection laws than your own.

11. Cookies and similar technologies

The marketing and invite website may use essential cookies or local storage (for example a guest token) needed for pages to function. We do not use advertising cookies on confettidrop.app in the current version.

12. Changes

We may update this Policy from time to time. We will change the “Last updated” date above and, when changes are material, provide additional notice as appropriate (for example in the app or on the website). Continued use after an update means you accept the revised Policy.

13. Contact

Privacy questions: hello@confettidrop.app.
Safety / abuse: hello@confettidrop.app with subject “Safety”.
Related pages: Terms of Service, Safety, Support.