Privacy Policy
Short version: we collect only what we need to get a cake to a birthday, we never sell it, and we never show your contact details publicly.
Last updated September 6, 2026
What we collect
When you request a cake, we ask for the recipient’s first name, birthday date, age, ZIP code, cake preference, dietary needs, and your name, email, and phone. If we confirm a delivery, we ask for an address at that point and only then.
When you give, Stripe collects your payment details. We never see or store your card number. We store the amount, and if you provide them, your name, email, and note.
When you apply to volunteer or as a bakery partner, we store what you enter in the form so we can review and contact you.
What we show publicly
Nothing about a request is shown publicly unless the requester explicitly consents and a person on our team approves it. Even then, only this may appear: the recipient’s first name, the age they are turning, a general area such as a city or state, the birthday date, the cake flavor, and a short line written with the requester.
We never publicly display a full name, address, ZIP code, phone number, email, the free-text story from the request, or any sensitive personal history.
How we use it
- To match requests with donors, bakery partners, and volunteers.
- To send you updates about a request, gift, or application.
- To share delivery details with the assigned bakery and volunteer, and only with them.
- To keep basic counts, like how many cakes have been funded.
We do not sell personal information. We do not use it for advertising.
Who we share it with
Service providers who help us run the site: Supabase (database and sign-in), Stripe (payments), Resend (email), and Vercel (hosting). Each handles data under its own privacy terms. Bakery partners and volunteers receive only what they need to fulfill a specific cake.
Keeping it
We keep request and gift records so we can answer questions and keep honest counts. You can ask us to delete your information at any time by writing to hello@cakeitforward.com. We will remove it unless we are required to keep a payment record.
Children
Requests for children are made by an adult. We do not knowingly collect information directly from anyone under 13.
Cookies
We use a single session cookie for admin and volunteer sign-in. We do not use tracking cookies or third-party analytics that profile you.
Your choices
You can ask to see, correct, or delete what we hold about you. You can withdraw public matching consent at any time and we will take the birthday down. Write to us at hello@cakeitforward.com or use the contact form.
Changes
If this policy changes in a way that matters, we will update the date at the top and note it on this page.