Privacy policy
Last updated 19 October 2026
Reveal Sky lets a host share a surprise with family and friends at the same moment. This policy explains what we collect, why, who we share it with, how long we keep it and your rights. We collect as little as we can, and we built Reveal Sky so that nobody, including us, can see a sealed answer before the reveal.
Who we are
Reveal Sky is run by the person who runs Reveal Sky in the United Kingdom, who is the “controller” of your personal data: the person responsible for it under UK data protection law. Contact: [email protected].
The short version
- We don’t sell data, show ads, or use analytics or tracking.
- The answer and any scan photo are encrypted on the keeper’s phone before they reach us.
- Guests don’t need an account. Hosts sign in with Google or an email link.
- Hosts can delete a reveal or their whole account, and guests can remove themselves, at any time.
What we collect, and why
| What | Why | Lawful basis |
|---|---|---|
| Hosts: email address and name (from Google, or the email you sign in with) | To run your account and let you manage your reveals | Contract: providing the service you asked for |
| Reveal details: title, parents’ names, reveal time and time zone, style, settings and an optional cover photo | To set up the reveal and show it to your guests | Contract |
| Pregnancy details: that a gender reveal is happening, the sealed answer (the baby’s sex) and any scan photo (“evidence”) | To seal the answer and reveal it at the time you choose | Your explicit consent, given when you create the reveal (see below), and contract |
| Guests: the name you type, your guess, an optional message and your reactions | To show you in the lobby, score the guesses and build the keepsake | Contract: taking part, under our terms |
| Guests: your email, only if you ask for a reminder | To send the 10-minute reminder, or tell you if the reveal moves or is cancelled | Consent: you can withdraw it by removing yourself |
| Guests: a private sign-in kept on your device (no account) | So the reveal remembers you, and only you can change your guess | Contract |
| Guests: a one-way scrambled version of your IP address when you join, never the address itself | To limit how many people can join from one connection and stop abuse | Legitimate interests: keeping reveals safe from spam |
| Everyone: technical logs kept by our hosting providers (IP address, browser, time, page) | To keep Reveal Sky secure and working, and to fix problems | Legitimate interests: security and reliability |
| Anyone who contacts us: your email and what you send | To reply, and to deal with reports and complaints | Legitimate interests; legal obligation for complaints |
Keepers (whoever seals the answer) don’t give us any details about themselves. Hosts give us the parents’ names and invite their guests; guests choose what to type.
Pregnancy details and your consent
Information about a pregnancy, including a baby’s sex and scan photos, counts as health information, which the law protects more strongly. So before creating a gender reveal the host confirms they’re one of the expecting parents, or have their permission, and gives explicit consent for Reveal Sky to handle it. We record when that consent was given.
You can withdraw consent at any time: cancel the reveal before it happens (this deletes the sealed answer and evidence straight away), delete the reveal afterwards, or delete your account. Withdrawing doesn’t affect what we did before.
The sealed answer and evidence
The answer is encrypted on the keeper’s phone with a key that only our reveal process can open, and only at the reveal time. Evidence photos are cropped and covered on the keeper’s phone, stripped of hidden details (like location), then encrypted the same way. Nothing about the answer is stored on the keeper’s device. After the reveal the host can see the evidence, and guests can if the host allows it.
Who sees what
- The host sees guests’ names, guesses and messages. Never guests’ email addresses.
- Before the reveal, guests see how many people guessed what, not who.
- After the reveal, anyone with the link sees the result and the guest list, with names, guesses and messages. Only share the link with people you trust.
Who we share it with
We use these providers to run Reveal Sky. They process data only on our instructions, under contracts that require them to keep it safe:
- Supabase (database, sign-in, file storage and the reveal process). Our data is stored in London, UK.
- Vercel (website hosting). Pages may be served from data centres near you, and our server code runs in London.
- Google, if you sign in with Google. Google handles your Google account under its own privacy policy.
- Resend (sending email), once reminder emails are switched on.
We may also share information if the law requires it, or to protect someone’s safety. We never sell it, and never share it for advertising.
International transfers
Our providers are based in the United States, so some data (for example, for support or email delivery) may be handled there. When it is, it’s protected by the UK’s approved safeguards: the UK Extension to the EU–US Data Privacy Framework, or the international data transfer agreement or addendum approved under UK law.
How long we keep it
| What | How long |
|---|---|
| Your account | Until you delete it |
| A reveal, its result, keepsake, guests, guesses, messages and reactions | Until the host deletes the reveal or their account |
| Evidence (the scan photo) | Deleted 90 days after the reveal, unless the host chooses to keep it |
| A guest who removes themselves | Their name, guess, message and reactions are deleted straight away |
| Guests’ reminder emails | Deleted within a day after the reveal happens or is cancelled |
| Scrambled IP addresses | Deleted after a day |
| Records of emails sent | Deleted after 7 days |
| Hosting providers’ technical logs | A short period set by each provider, usually days to weeks |
Deleted data can stay in our providers’ backups for a short time before it’s overwritten.
Keeping it safe
Everything travels encrypted (HTTPS). The answer and evidence are encrypted before they leave the keeper’s phone. Each person can reach only their own data, enforced by the database itself, and hosts are signed out after a day away or 7 days after signing in.
Children
Hosts must be 18 or over. Guests of any age can join a reveal they’re invited to; we only ask for a name and a guess. Children under 13 should ask a parent or guardian before adding their email for a reminder.
Cookies and storage on your device
We only store what Reveal Sky needs to work, or settings you choose. Nothing is used for tracking or advertising, so we don’t ask for cookie consent.
| Name | What it does | How long |
|---|---|---|
sb-…-auth-token (cookie) | Keeps hosts signed in, and remembers a guest’s device | Until you sign out (hosts: 7 days at most) |
reveal-seen (cookie, hosts only) | The time of your last visit, so we can sign you out after a day away | 7 days |
reveal:brighter-sky (device storage) | Remembers if you turned on “Brighter sky” | Until you turn it off |
reveal:sky-2d (device storage) | Remembers that your device runs the simpler sky more smoothly | Until you close the tab |
The keeper’s sealing page stores nothing at all on the keeper’s device.
Your rights
Under UK data protection law (and the EU GDPR, where it applies) you can ask us to:
- give you a copy of your data (access), or send it to you in a portable format;
- correct it, or delete it;
- restrict how we use it, or object to our using it for legitimate interests;
- stop relying on your consent, by withdrawing it.
Hosts can delete a reveal, or their account and everything in it, from the Account page. Guests can tap “Remove me from this reveal” on the reveal’s page. For anything else, email [email protected]. It’s free, and we reply within one month. We may need to check it’s really you first.
No decisions with legal or similarly significant effects are made about you automatically. An automatic filter can turn down an offensive name or message; if it gets one wrong, tell us.
Complaints
If you’re unhappy with how we’ve handled your data, please tell us first at [email protected]. We’ll acknowledge your complaint within 30 days and let you know the outcome. You also have the right to complain to the Information Commissioner’s Office, the UK regulator: ico.org.uk/make-a-complaint or 0303 123 1113.
Changes to this policy
When we change this policy we’ll update the date at the top. If a change affects how we use pregnancy details, we’ll ask for your consent again before it applies to you.