Privacy

Who you’re dealing with

The service is provided by Glede Norway AS. Contact: dpo@glede.app. You must be at least 18 years old to order.

What information we use

We receive names, email addresses, telephone numbers, billing location, order details and greeting content from the buyer, recipient or contributors. A recipient’s details usually come from the person sending the gift. Greeting content may include text, images, video and audio and is visible to people who have the relevant gift or contribution link. Payment and gift-card providers return payment references, delivery and redemption status. Our website and service providers also process IP addresses, browser/device information, security logs and, when optional tracking is enabled, visit, advertising-click and purchase events. We use this information to provide the service, prevent misuse, answer support requests, keep required records and, unless you opt out (in the United States) or with the relevant consent (elsewhere), analyse use and measure advertising. Do not upload sensitive information or someone else’s content without permission. Card details are submitted to Stripe; we do not store the full card number or security code.

Children and guardians

Purchasing is intended for adults. A parent or guardian should manage gifts for children. We do not send advertising or analytics events from private gift or group-greeting pages. Do not enable optional tracking if you are under 18. Contact dpo@glede.app about a child’s data or accidental submissions; we assess deletion or restriction and any legally required parental consent. An adult purchase age is not the same as a local age for privacy consent.

Country, address and tax records

We use an approximate country from your connection and your saved choice to suggest a storefront. For US or Canadian gift cards sold at face value, we ask for your country of residence without collecting a street address, state/province or postal code for tax calculation. Stripe processes the payment, but we do not use Stripe Tax for these purchases. For Norwegian purchasers, VAT on any service fee is calculated locally without requesting an address. In other cases, the billing address determines the tax calculation and is shared with Stripe where Stripe Tax is used. Required tax records may be kept for ten years after the transaction year where OSS rules apply. This does not extend retention of greeting content.

Legal basis

Information about the buyer and order is processed to fulfill the purchase agreement. The recipient's contact information is used based on our legitimate interest in delivering the gift the buyer ordered; the recipient can contact us and object. Accounting information is retained to fulfill legal obligations. Security and abuse prevention are based on legitimate interest. Optional analysis and marketing require consent that can be withdrawn.

Providers and transfer

Glede Norway AS operates from Norway. Google Firebase and Vercel provide storage and hosting; Stripe processes payments; Runa supplies gift cards and redemption services; Sveve delivers SMS; and Resend delivers email. If you choose AI image generation, the image and instructions needed for that feature are sent to OpenAI. Information may be processed outside your country or province, including in Norway, the EEA and the United States, and may be accessible to authorities under the laws of the processing country. We remain responsible for the processing we control and use contractual safeguards and legally required transfer mechanisms. Providers may also process information for their own payment, fraud-prevention or legal obligations as explained in their linked notices. Contact our privacy officer using the details in this notice for information about international processing and applicable safeguards.

Bunny.net delivers video. PostHog and Vercel provide optional usage analytics. When marketing is on (by default for visitors in the United States unless they opt out, otherwise with consent), Meta receives advertising-click and browser identifiers (including fbclid, _fbc and _fbp), browser/device information, page and purchase events, amount, currency, market and buyer country, and a one-way hash of the buyer’s email address. Meta’s browser connection also exposes the device’s IP address. Hashing helps match an email address and does not make it anonymous. We use this sharing for advertising measurement; Meta may associate it with its own account and advertising data under its privacy notice. This can constitute sharing for cross-context behavioural advertising under US privacy laws. Greeting content and recipient contact details are not sent for this purpose. You can opt out, refuse or withdraw optional consent without losing the ability to buy or receive a gift. Advertising-click cookies we set last up to 90 days unless removed earlier. When marketing is on, Google Ads receives ad-click and browser identifiers, purchase amount, currency and a one-way transaction ID. To improve purchase measurement, we also send normalized, SHA-256-hashed values of the buyer’s email address and phone number when available. These hashes can be matched to Google accounts and are not anonymous. We do not send plain-text contact details, names, recipient information or greetings to Google Ads.

• Google Firebase
• Vercel
• Stripe
• Runa
• Sveve
• Resend
• OpenAI
• Bunny.net
• PostHog
• Google Ads
• Meta

Storage and your rights

Unpaid, inactive orders and associated greetings are reviewed for deletion after 30 days. Gift content is retained while the gift still has value or delivery is ongoing, and reviewed for deletion six months after the gift value is used or refunded. Closed support cases are normally retained for 24 months. Accounting materials subject to retention obligations are kept for five years after the end of the fiscal year. Documented disputes, legal claims, or security incidents may require longer retention of necessary information. Deletion does not apply to unused gift values.

We store information as long as necessary for delivery, customer service, security and legally required documentation. Accounting material is retained according to the rules applicable to the business. You can request access, correction, deletion, restriction or export, and object to processing when conditions are met. Send the request to our privacy officer at dpo@glede.app. We may ask for necessary identity confirmation. Depending on the privacy law that applies, you may also use an authorised agent, request a portable copy, opt out of targeted advertising or sale/sharing, or appeal a refused request by contacting dpo@glede.app and identifying it as an appeal. We explain any refusal and applicable review options. We respond within the period required by the applicable law, generally 45 days for covered US state-law requests, and notify you of any permitted extension. Opt-outs do not require proof of identity beyond what is needed to apply the choice. We do not use sensitive personal information to infer characteristics about you.

Cookies and privacy choices

Necessary storage supports security, orders and payments. When you visit from the United States, optional analytics and marketing are on by default until you opt out. Everywhere else they stay off until you consent and confirm you are an adult. To opt out, use “Do Not Sell or Share My Personal Information / Cookie settings” in the footer and turn off analytics and marketing. You can change your choices there at any time. We honour Global Privacy Control by disabling analytics and marketing for that browser. We do not separately respond to the older Do Not Track signal. Turn off marketing to opt out of advertising-related sale or sharing; this does not prevent buying or receiving gifts. Choices generally apply to the browser where they are made, so set them on other devices too. You can also contact our privacy officer using the details in this notice to make a privacy request. We do not charge or discriminate against you for exercising applicable privacy rights.

SMS about the gift

SMS delivers a gift and responds to related requests; it does not enrol the recipient in marketing. The sender must have permission from the holder of the receiving number. Message frequency depends on gifts and any requested resends or support replies. Carrier message and data rates may apply, and delivery can be affected by the carrier or an incorrect number. Where the sending number accepts replies, reply STOP to opt out or HELP for assistance. Messages from a named sender may not accept replies: contact support@glede.app to stop gift SMS or obtain help. Opting out does not cancel ownership of a paid gift; contact us to arrange another way to access it. We do not treat purchase or acceptance of these terms as consent to promotional texts.