Privacy Policy
Last updated: August 15, 2026
BumpBash ("we," "us") makes a web app for hosting baby shower games. This page explains what information we collect when you host or join a shower, and what we do with it.
Information we collect
Event details. When you create a shower, we store the event title, the mom-to-be's name (if you choose to add it), the due date, and the games and questions you set up.
Guest names. When someone joins a shower, we ask for a first name (or nickname) and an optional emoji. We don't require an email address, a password, or any other account information to play.
Photos guests upload. Some games, like Baby Photo Match, ask guests to upload a photo from their own device. Wishes for Baby also allows an optional photo attachment. These photos are stored so the game and keepsake can display them, and they're only accessible within that event.
Usage and analytics data. We collect basic analytics — things like which pages are viewed, which games are played, and whether a purchase or export happened — so we can understand how BumpBash is used and fix what's broken. It is not used to build a profile of any individual guest, and it is not sold or shared for advertising.
How we use this information
We use the information above to run the shower you or your host set up: displaying games, tallying scores, compiling the keepsake PDF for hosts on the Full Shower plan, and processing payments for paid plans. We do not use guest information for advertising, and we do not sell personal information to anyone, ever.
Cookies and analytics
We use privacy-respecting analytics (PostHog) to understand how the site and app are used. We don't use tracking cookies to build advertising profiles, and we don't sell data to ad networks.
We also use Google Analytics 4 on our marketing pages to measure aggregate website usage (pages viewed, referrer, device, and approximate location). Google signals and ad personalization are not enabled, and no advertising features are used. See Google's privacy policy for details.
Session recording
On our marketing pages and in the host control room, we record anonymised session replays — a reconstruction of how the page was used, so we can see where hosts get stuck. We think it's important to be specific about what that does and doesn't capture:
- We do not record guest screens. Joining, playing, and leaving wishes are never recorded.
- Text you type is masked. Form fields are replaced with placeholders before anything leaves your browser, so we never see their contents.
- Your host key, your private host link, guest names, wishes, and uploaded photos are excluded outright — those parts of the page are blocked from recording, not merely masked.
- We do not record the browser console or network traffic.
- Payment details are never involved: checkout happens on Polar's own hosted page, which we do not control or record.
If you'd rather not be recorded at all, most browsers' "Do Not Track" or content-blocking settings will stop it, and you can email us to have any recording associated with your event deleted.
How long we keep information
Event data, guest names, and uploaded photos are kept for as long as the event exists so the host can access their keepsake. If you'd like your event or guest information removed sooner, email us and we'll take care of it.
Children's privacy
BumpBash is intended for use by adults planning or attending a baby shower. The photos guests upload for games like Baby Photo Match are historical childhood photos of the adult guests themselves, not photos of current minors. We don't knowingly collect information from children, and BumpBash is not directed at children.
Your choices
You can ask us to access, correct, or delete the information associated with an event or a guest profile at any time by emailing us. Hosts can also end an event from their own console.
Changes to this policy
If we make material changes to this policy, we'll update the date at the top of this page.
Contact
Questions about this policy or your data? Email hello@bumpbash.com.