Privacy

Who you’re dealing with

The service is provided by Glede Norway AS. Contact: dpo@glede.app. You must be at least 18 years old to order.

What information we use

We receive names, email addresses, telephone numbers, billing location, order details and greeting content from the buyer, recipient or contributors. A recipient’s details usually come from the person sending the gift. Greeting content may include text, images, video and audio and is visible to people who have the relevant gift or contribution link. Payment and gift-card providers return payment references, delivery and redemption status. Our website and service providers also process IP addresses, browser/device information, security logs and, when optional tracking is enabled, visit, advertising-click and purchase events. We use this information to provide the service, prevent misuse, answer support requests, keep required records and, with the relevant consent, analyse use and measure advertising. Do not upload sensitive information or someone else’s content without permission. Card details are submitted to Stripe; we do not store the full card number or security code.

Children and guardians

Purchasing is intended for adults. A parent or guardian should manage gifts for children. We do not send advertising or analytics events from private gift or group-greeting pages. Do not enable optional tracking if you are under 18. Contact dpo@glede.app about a child’s data or accidental submissions; we assess deletion or restriction and any legally required parental consent. An adult purchase age is not the same as a local age for privacy consent.

Country, address and tax records

We use an approximate country from your connection and your saved choice to suggest a storefront. For US or Canadian gift cards sold at face value, we ask for your country of residence without collecting a street address, state/province or postal code for tax calculation. Stripe processes the payment, but we do not use Stripe Tax for these purchases. For Norwegian purchasers, VAT on any service fee is calculated locally without requesting an address. In other cases, the billing address determines the tax calculation and is shared with Stripe where Stripe Tax is used. Required tax records may be kept for ten years after the transaction year where OSS rules apply. This does not extend retention of greeting content.

Legal basis for processing

For Canadian users, we rely on meaningful consent for collecting, using and disclosing personal information where required, or on a specific exception allowed by applicable law. Providing information needed for a purchase allows us to process it for the disclosed delivery and payment purposes; it is not permission for unrelated advertising. A sender must be entitled to provide the recipient’s information and have permission for SMS delivery. Optional analytics and marketing require a separate, revocable choice. You may withdraw consent by contacting our privacy officer using the details in this notice; we explain any effect on delivery and any information that must still be retained by law. Our Norwegian establishment also applies the relevant GDPR grounds: contract for the purchase, legal obligations for records, and legitimate interests for necessary security and delivery where permitted. Those grounds do not replace consent required by Canadian law.

Providers and transfer

Glede Norway AS operates from Norway. Google Firebase and Vercel provide storage and hosting; Stripe processes payments; Runa supplies gift cards and redemption services; Sveve delivers SMS; and Resend delivers email. If you choose AI image generation, the image and instructions needed for that feature are sent to OpenAI. Information may be processed outside your country or province, including in Norway, the EEA and the United States, and may be accessible to authorities under the laws of the processing country. We remain responsible for the processing we control and use contractual safeguards and legally required transfer mechanisms. Providers may also process information for their own payment, fraud-prevention or legal obligations as explained in their linked notices. Contact our privacy officer using the details in this notice for information about international processing and applicable safeguards.

Bunny.net delivers video. PostHog and Vercel provide optional usage analytics. With marketing consent, Meta receives advertising-click and browser identifiers (including fbclid, _fbc and _fbp), browser/device information, page and purchase events, amount, currency, market and buyer country, and a one-way hash of the buyer’s email address. Meta’s browser connection also exposes the device’s IP address. Hashing helps match an email address and does not make it anonymous. We use this sharing for advertising measurement; Meta may associate it with its own account and advertising data under its privacy notice. This can constitute sharing for cross-context behavioural advertising under US privacy laws. Greeting content and recipient contact details are not sent for this purpose. You can refuse or withdraw optional consent without losing the ability to buy or receive a gift. Advertising-click cookies we set last up to 90 days unless removed earlier. With marketing consent, Google Ads receives ad-click and browser identifiers, purchase amount, currency and a one-way transaction ID. To improve purchase measurement, we also send normalized, SHA-256-hashed values of the buyer’s email address and phone number when available. These hashes can be matched to Google accounts and are not anonymous. We do not send plain-text contact details, names, recipient information or greetings to Google Ads.

• Google Firebase
• Vercel
• Stripe
• Runa
• Sveve
• Resend
• OpenAI
• Bunny.net
• PostHog
• Google Ads
• Meta

Storage and your rights

Unpaid, inactive orders and associated greetings are reviewed for deletion after 30 days. Gift content is retained while the gift still has value or delivery is ongoing, and reviewed for deletion six months after the gift value has been used or refunded. Closed support cases are normally retained for 24 months. Accounting materials subject to retention obligations are kept for five years after the end of the fiscal year. Documented disputes, legal claims, or security incidents may require longer retention of necessary information. Deletion does not apply to unused gift values.

We store information as long as necessary for delivery, customer service, security and legally required documentation. Accounting material is retained according to the rules applicable to the business. You can request access, correction, deletion, restriction or export, and object to processing when conditions are met. Send the request to our privacy officer at dpo@glede.app. We may ask for necessary identity confirmation. Canadian users can also withdraw consent, request an electronic copy where applicable and challenge our handling of their information through dpo@glede.app. We normally respond to access requests within 30 days, or the period required by the applicable law, and explain any lawful extension or refusal. You may complain to the Office of the Privacy Commissioner of Canada or the relevant provincial authority, including Québec’s Commission d’accès à l’information.

Cookies and privacy choices

Necessary storage supports security, orders and payments. Optional analytics and marketing are off until you consent and confirm you are an adult. You can change your choices using the cookie/privacy settings in the footer. We honour Global Privacy Control by disabling analytics and marketing for that browser. We do not separately respond to the older Do Not Track signal. Turn off marketing to opt out of advertising-related sale or sharing; this does not prevent buying or receiving gifts. Choices generally apply to the browser where they are made, so set them on other devices too. You can also contact our privacy officer using the details in this notice to make a privacy request. We do not charge or discriminate against you for exercising applicable privacy rights.

SMS about the gift

SMS delivers a gift and responds to related requests; it does not enrol the recipient in marketing. The sender must have permission from the holder of the receiving number. Message frequency depends on gifts and any requested resends or support replies. Carrier message and data rates may apply, and delivery can be affected by the carrier or an incorrect number. Where the sending number accepts replies, reply STOP to opt out or HELP for assistance. Messages from a named sender may not accept replies: contact support@glede.app to stop gift SMS or obtain help. Opting out does not cancel ownership of a paid gift; contact us to arrange another way to access it. We do not treat purchase or acceptance of these terms as consent to promotional texts.