Privacy Policy
Last Updated: October 2026 • Effective for all Coceleb visitors and creators
1. Our Privacy Philosophy
Celebration moments are inherently personal. We believe personal photos, inside jokes, and heartfelt letters belong only to the creator and the intended recipient. We do not sell your personal information, display third-party advertisements, or index celebration content on public search engines.
2. Information We Collect
Experience Content: Recipient name, nickname, personal celebration letter, and uploaded photo memories.
Order & Transaction Identifiers: Internal order ID, chosen celebration theme, currency, price quote, and transaction timestamp.
Aggregated Privacy-Minimized Telemetry: Anonymized visitor event logs (page views, template selections, and country-level geographic resolution) to ensure platform reliability and detect fraudulent payment behavior.
3. Payment Information Security
We process payments via Razorpay, an authorized, PCI-DSS Level 1 compliant payment aggregator. When you complete checkout, your payment card number, CVV, expiry date, UPI credentials, or netbanking passwords are encrypted and processed directly by Razorpay. Coceleb never stores or has access to your sensitive financial payment credentials.
4. Media Storage & Search Indexing Defense
Private Media Storage: Uploaded photo files are stored in private Supabase Storage buckets with direct directory listing disabled.
Strict Search-Engine Blocking: All published celebration URLs (/e/:slug) are served with strict HTTP headers: X-Robots-Tag: noindex, nofollow, noarchive, nosnippet. Google and automated web search crawlers are forbidden from indexing private celebration pages.
High-Entropy Links: Links are generated using random, unguessable cryptographic identifiers to prevent unauthorized discovery.
5. Data Retention & Expiration
Published celebration experiences remain actively hosted for 365 days (one full year) from the date of publishing. Unfinished drafts that are never published or paid for are automatically cleaned up after 30 days.
6. Data Deletion Requests
If you are the creator of a celebration moment and wish to have your published link and all associated photos deleted before the 365-day expiration window, please visit our Contact Page with your link URL or Order ID. We will permanently purge the media and database records within 48 hours.
7. Contact Information
For privacy inquiries, please visit our Customer Support & Contact Page.
Team: Coceleb Privacy & Operations