One registry for every store. Start your registry
Privacy Policy
Effective 2026-09-23 · Version 1.0
This is a production draft, written to describe BabyGather’s actual product behavior as accurately as possible. It is provided for legal counsel review and is not a certification of compliance with any specific law or regulation.
Who operates BabyGather
BabyGather (https://babygather.ae) is operated by citybusiness LLC, a company organized in Wyoming, United States.
Contact
Questions about this policy or your information can be sent to support@babygather.ae.
Age
BabyGather accounts are intended for adults aged 18+. We do not knowingly create accounts for anyone younger.
Information you provide to us
Depending on how you use BabyGather, this can include:
- Your name and email address, when you create an account
- Your password, handled by our authentication provider (Better Auth) — we do not store passwords in plain text
- Optional profile details you choose to add: first/last name, phone number, an avatar image, a due date or child’s birth date, parenting stage, city/region, and a short bio
- Shipping/billing addresses you choose to save to your account
- Registry details you create: a registry title, greeting message, event date, location, co-parent name, and privacy setting
- Registry items you add, including any external product URLs you paste in from other stores
- Cash-fund details you set up: a fund name, goal amount, and note (see “Cash funds” below)
- If you mark a gift as purchased or contribute to a cash fund as a guest: a name, an optional email address, an optional gift message, and whether you asked to stay anonymous to the registry owner
- Anything you send us directly, such as a support request
Information generated by using the service
- Session/authentication data needed to keep you signed in (see “Cookies” below)
- When you click a retailer offer link, we record that a click happened — which product, which merchant, and which registry (if any) it came from, plus an internal click identifier used for affiliate attribution. We do not record your account, session, IP address, user agent, or the referring page as part of this event.
- When you use a “Share on WhatsApp”, copy-link, or native share action on a registry, we record that the share action was taken, which channel was used, and which page it was shared from. We do not record message contents, a recipient, a phone number, or clipboard contents.
- Standard technical logs generated by our hosting provider in the ordinary course of running the service
Affiliate tracking
Some outbound links to retailers include affiliate tracking identifiers (see our Affiliate Disclosure). We record that an outbound click occurred, but a click is not proof that a purchase was completed — BabyGather has no way to independently confirm what happens on a retailer’s own site.
Public registry information
A registry can be set to one of three privacy levels, and they behave differently:
- Public — discoverable through our find-a-registry search and generally viewable by anyone.
- Unlisted — not listed in search, but viewable by anyone who has the registry’s link. Unlisted is a convenience for sharing with people you choose to send the link to — it is not a secret or password-protected mode unless a share password has separately been set.
- Private — viewable only by the registry owner while signed in. Everyone else, including someone who has the link, is shown the same “not found” response a nonexistent registry would show.
Information you choose to put on a Public or Unlisted registry — such as your greeting message, event date, location, and registry items — may be viewed by anyone with access to that registry, per the level above.
Service providers
We use a small number of providers to run BabyGather:
- Vercel — application hosting
- Neon — our PostgreSQL database
- Resend — delivering transactional email (account and password-reset emails)
We don’t use analytics, advertising, or tracking-pixel services today, so none are listed here. If that changes, we’ll update this policy.
Third-party retailers
When you follow a link to a retailer from BabyGather, that retailer’s own privacy practices apply to whatever you do on their site — see our Third-Party Retailer Disclaimer.
Cookies and local storage
BabyGather currently uses:
- An essential, secure session cookie (set by our authentication provider) so you stay signed in
- A small piece of local browser storage that remembers whether you’ve dismissed the site’s announcement banner — it holds no personal information
We do not currently use advertising cookies, analytics cookies, or third-party tracking scripts.
Data retention
We keep account and registry information for as long as your account exists, so the service keeps working the way you’d expect. We don’t currently enforce a fixed automatic deletion schedule for this data.
Your choices
- You can edit your profile and saved addresses at any time from your account pages.
- You can edit registry details, items, and privacy settings you own.
- For anything else — including a request about your account or its deletion — contact support@babygather.ae. We don’t currently offer a fully self-service account-deletion button; requests are handled by our support team.
Cross-border processing
citybusiness LLC is based in Wyoming, United States, and our service providers operate their own infrastructure in various locations. This means information may be processed or stored in countries other than your own. We make no claim about any particular data-adequacy or cross-border-transfer certification.
Security
We use technical and organizational measures designed to protect information against unauthorized access, alteration, or loss. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Changes to this policy
We may update this policy as the product changes. We’ll update the effective date and version number above when we do; continued use of BabyGather after a change means you accept the updated policy.