Gift ideas among friends
Privacy Policy
Our promise: CoccoBD is designed to be lightweight and respectful. No mandatory accounts, no data sold to third parties, and automatic deletion of the entire session the day after the birthday.
1. Data Controller
The Data Controller is Antonio Seguino, reachable for any clarification or request regarding rights under the GDPR at the email address: anto.seguino2018@gmail.com.
2. What data we collect
CoccoBD collects three types of information, all tied solely to a specific session:
- Data provided by the session creator: birthday person's name and birthday date.
- Contributions from friends: contributor's name (optional) and open text about tastes, anecdotes, preferences, and traits of the birthday person.
- Conversations with the AI assistant: messages exchanged between the organizer and the virtual advisor, along with generated gift ideas.
We intentionally do not require an email address or password to start or participate in a collection. We also temporarily collect the IP address of users submitting contributions or chat messages solely to prevent abuse (e.g. automated spam). We do not use it to track or profile users.
3. Affiliations and Third-Party Services
CoccoBD participates in the Amazon Associates Program. As an Amazon Associate, the Data Controller earns from qualifying purchases. This means that if you click on a generated gift link leading to Amazon and make a purchase, we may receive a small commission at no extra cost to you. Amazon uses cookies to trace the origin of the purchase back to our affiliate tag. For more information, please read the Cookie Policy.
4. An important note: data about a person who didn't submit anything
The birthday person typically does not enter their data directly: the organizer and their friends do, often without their knowledge (as it is a birthday surprise). The session creator is responsible for ensuring they have a legitimate, confidential reason to do so and for avoiding sensitive or unwelcome information. If the birthday person wishes to have their data immediately removed, they can notify the organizer or contact us at the email above.
5. Why we collect it
To power an AI conversational model (via large language models, see section 7) responding in first-person as the birthday person, enabling the organizer to ask for tailored, fun gift advice.
6. How long we retain data
Not indefinitely. Every session has an automatic expiration date linked to the entered birthday date: the day following the birthday, all related data (contributions, conversations, gift suggestions, the session itself) are permanently and irreversibly deleted from our databases. Any individual contribution can also be deleted at any time by the organizer directly from their dashboard.
7. Who we share data with
To operate the service, we rely on trusted infrastructure providers processing data on our behalf:
- Vercel — web application hosting and edge delivery.
- Upstash — encrypted Redis database where session data is retained until expiration.
- Anthropic — processes contributions and conversations to generate gift recommendations via AI (with GDPR-compliant data processing agreements).
Optional location. If, in the organizer's chat, you tap "Find local shops" and allow geolocation, your browser rounds your coordinates to about 1 km and sends them to the OpenStreetMap Nominatim service (OpenStreetMap Foundation) to get the name of your city and neighbourhood. If you type the city instead, the suggestions while you type come from the Photon service (komoot), which receives the text you type. City, neighbourhood and rounded coordinates are saved only in your browser (localStorage); the AI chat only receives the city and neighbourhood names, never the coordinates. When you tap "Show nearby shops" on a gift card, the rounded coordinates and the type of shop pass through our server, which looks up the shops on Photon or, as a fallback, on public OpenStreetMap Overpass servers: your IP address does not reach them, and we do not save or log the coordinates. You can remove the location at any time.
We will never sell or share your data with third parties for advertising or marketing purposes.
8. Minors
The service may be used to organize birthday parties for minors. If the birthday person is under 14 years old, the organizer guarantees having consent from a legal guardian before gathering information about them.
9. Your rights
You can request access, correction, or early deletion of your data at any time by writing to anto.seguino2018@gmail.com. Since the service requires neither accounts nor personal credentials, we simply ask for the session link or code to identify the relevant data.
10. Security
All communications between your device and our servers are encrypted via HTTPS/TLS. Access keys to backend services are protected and segregated at the server level.
10. Changes
We may update this policy periodically; the date at the top of the page always indicates the latest approved revision.
Have questions or specific requests?
We are happy to answer any questions about CoccoBD.
Contact support