Privacy
Last updated September 29, 2026
The Birthday Dept. runs workplace birthdays for companies: a card coworkers sign, and on some plans a cake or cookies at the door. This page says what we keep, why, who sees it, and how to change or remove it. Plain words, no tricks.
What we keep
- From your company: your name, and your work email or mobile number if they add it, so we can send you your setup link.
- From you, on your setup page: your birthday (the year is optional and never shown at work), cake or cookies and your ranked flavors, dietary notes, an optional photo, and, only if you choose, your home address and your consent to texts.
- On cards: what you write, draw, record or vote for when you sign a coworker’s card.
- Accounts: your email, and a password (stored only as a one-way hash) or your Google sign-in.
- Billing: handled by Stripe. We never see or store card numbers.
- Messages: a record of the emails and texts we send, and any texts you send back.
How we use it
Only to run birthdays: to put your day on your company’s calendar, gather the card, send invites and reminders, and get your cake or cookies to your door. We don’t sell your information, we don’t use it for advertising, and we don’t build profiles.
Who sees what
- Coworkers see your name, the day and month of your birthday, and your photo if you added one. Never your year, your address or your number.
- Your company’s birthday admins see your preferences and, if you shared it, your home address, because they arrange the delivery.
- The bakery making your treat (Nothing Bundt Cakes or Tiff’s Treats) gets your name, delivery address, flavors and any dietary note, for that one order.
- Services that run the app for us handle data only to do their job: Vercel (hosting), Neon (database), Resend (email), Twilio (texts), Stripe (payments), Google (sign-in, if you use it) and Lob (printed cards, if your company sends them).
Texts
We text you only if you check the box on your setup page and give us a mobile number. Texts cover your coworkers’ cards to sign, one reminder if you haven’t signed, and your own card on your birthday. Message frequency varies; message and data rates may apply. Reply STOP to any text to stop them, or HELP for help.
We do not sell, rent or share your mobile number or your consent to receive texts with anyone for their marketing. Text consent is never shared with third parties or affiliates. Twilio, which sends our texts, handles your number only to deliver them.
Your choices
- Change or remove anything from your setup link or your account, any time.
- Un-check the address box and we delete the address we hold.
- Opt out of birthdays entirely with one tap; nobody at work is told.
- Want everything deleted? Ask us and we’ll remove it.
How long we keep it
As long as your company uses The Birthday Dept. and you’re on their roster. When a company leaves or removes you, we delete your details, keeping only what we must for billing records.
Keeping it safe
Everything travels encrypted, passwords are hashed, and access to your details is limited to the people above.
Changes and questions
If this page changes in a way that matters, we’ll say so here and update the date at the top. Questions go to our contact page; a person answers.