Privacy Policy

1. The short version

• We collect what we need to run your planner: your email address and the gift lists, budgets and notes you enter.
• Your lists are private to your household. We don’t sell your personal information, and we don’t use it for targeted advertising.
• We use only the cookies needed to keep you signed in. No advertising trackers.
• Marketing emails are opt-in only, and you can turn them off any time.
• You can ask us to show, correct, export or delete your information by emailing hello@donebydecember.com.

2. Information we collect

Information you give us

• Account information: your email address and, if you provide it, a preferred name.
• Planner content: the names or nicknames of people you’re shopping for, optional colors and notes, gift ideas, gift status, prices, quantities, store names, product links, categories, and budgets.
• Consent records: when you accepted our Terms and Privacy Policy, and whether you opted in or out of marketing email (with the date and the version of the consent wording).
• Tester answers: if you join our tester program, your answers to in-app questions.
• Messages: anything you send us by email, such as support requests.
• Payment information (when Premium billing is available): handled by our payment processor. We receive limited details such as subscription status, plan and the last four digits of your card, not your full card number.

Information collected automatically

• Activity in the app: records needed for the app to work, such as when gifts were created or changed status, and your plan.
• Technical information: like nearly every website, our hosting and security providers process your IP address, browser and device type, and request logs. This is used to deliver pages, keep the Service secure and fix problems.

Information about other people

The people on your gift lists don’t have accounts with us. We only have what you choose to enter about them, and we use it only to show your lists back to you. Please enter only first names or nicknames, and never sensitive details. We don’t ask for, and you don’t need to enter, ages, birthdays, addresses or photos.

3. How we use information

• To provide the Service: sign you in, save and show your lists, calculate budgets and the Merry Meter, and sync across your devices.
• To send emails you need, such as sign-in codes and important account or policy notices.
• To send marketing email, only if you opted in.
• To provide Premium, including gifted Premium, and to process payments once available.
• To run our tester program and improve the Service, including understanding which features are used in aggregate.
• To keep the Service secure, prevent abuse and fraud, and enforce our Terms.
• To respond to your questions and requests.
• To comply with the law and protect our rights and the rights of others.

4. What we don't do

• We do not sell your personal information.
• We do not share your personal information for targeted (cross-context behavioral) advertising.
• We do not show third-party ads inside your planner or use advertising trackers.
• We do not share your gift lists with retailers or affiliate partners.
• We do not use your planner content to build profiles of you or the people on your lists.

5. Who we share information with

We share information only with service providers that help us run the Service, under contracts that limit their use of it to providing services to us:

We may also share information:

• With members of your household, if you invite them once household sharing is available.
• If required by law, subpoena or court order, or to protect the safety, rights or property of anyone.
• In connection with a merger, acquisition or sale of all or part of our business, in which case this policy will continue to apply to your information or you will be notified.
• With your permission.

6. Affiliate links

Some links in the Service may be affiliate links (see our Affiliate Disclosure). When you click one, you leave Done By December and go to the retailer’s site. The retailer or affiliate network may set its own cookies to record that you came from us, under its own privacy policy. We may receive reports of resulting sales and commissions, which generally do not identify you. We don’t send the retailer your gift lists or your account information.

7. Cookies and similar technology

We use only strictly necessary cookies and similar storage: to keep you signed in, keep your session secure, and remember basic settings. We do not use advertising cookies or cross-site tracking. Because we don’t track you across sites, there is nothing for “Do Not Track” or Global Privacy Control signals to turn off, but we honor them as an opt-out of any sale or sharing for advertising, which we don’t do anyway.

If you block cookies in your browser, you won’t be able to sign in.

8. Emails we send

• Account emails (sign-in codes, security notices, changes to our Terms or this policy, and billing receipts) are needed to run your account. You can’t opt out of these while you have an account.
• Marketing emails (gift ideas, holiday tips, product news) are sent only if you opted in. You can turn them off any time in Settings or with the unsubscribe link in any marketing email.

9. How long we keep information

• We keep your account and planner content while your account is open, including past seasons, so you can look back on them.
• If you ask us to delete your account, we delete your account and planner content within 30 days. Copies in routine backups are overwritten within 90 days after that.
• We keep consent records, and records we need for taxes, billing, fraud prevention or legal reasons, as long as required by law.
• Server and security logs are kept for a limited time, generally no more than 90 days.

10. How we protect information

We use reasonable administrative, technical and physical safeguards. These include encryption in transit (HTTPS), database rules that keep each household’s data separate, limited internal access, and passwordless sign-in so there are no passwords to steal. No system is perfectly secure. If we learn of a breach affecting your information, we will notify you as required by law.

11. Children's privacy

Accounts are for adults 18 and older. The Service is not directed to children under 13, and we do not knowingly collect personal information from children. Adults may enter a child’s first name or nickname on a gift list for their own planning; we use it only to show that list back to the account holder. If you believe a child has created an account or given us personal information, contact us at hello@donebydecember.com and we will delete it.

12. Your choices and rights

You can:

• See and edit most of your information directly in the app at any time.
• Get a copy of your information in a portable format.
• Correct information that is inaccurate.
• Delete your account and information.
• Opt out of marketing email in Settings or by unsubscribing.

To make a request, email hello@donebydecember.com from the email address on your account (so we can verify it’s you). We respond within 45 days, and may extend that once by another 45 days when reasonably necessary, in which case we’ll let you know. We won’t treat you differently for exercising your rights. You may use an authorized agent where your state allows; we may ask for proof of the agent’s authority and verify your identity.

13. Notice for U.S. state residents

Residents of Texas, California and other states with consumer privacy laws may have the rights described above (to access, correct, delete and obtain a copy of their personal data, and to opt out of the sale of personal data, targeted advertising, and certain profiling). We do not sell personal data, use it for targeted advertising, or use it for profiling that produces legal or similarly significant effects.

Categories of personal data we process: identifiers (email address, preferred name); content you enter (gift lists, notes, budgets); consent and account records; commercial information (plan and subscription status); and internet or technical activity (IP address, device and browser information, logs). We do not intend to collect sensitive data. Please don’t enter it in notes.

Categories of third parties we share personal data with are the service providers listed in “Who we share information with” above.

Appeals. If we decline your request, you may appeal by replying to our decision or emailing hello@donebydecember.com with the subject line “Privacy Appeal.” We will respond to your appeal within 60 days. If you’re not satisfied, you may contact your state attorney general. For Texas, that’s the Office of the Texas Attorney General (texasattorneygeneral.gov).

14. Where information is stored

We are based in the United States, and your information is stored and processed in the United States by us and our service providers.

15. Changes to this policy

We may update this policy as the Service changes. If we make material changes, we’ll notify you by email or in the Service before they take effect. The “last updated” date at the top shows when the policy last changed.

16. Contact us

Questions or requests about privacy? Email hello@donebydecember.com.