Legal

Privacy Policy

Version privacy-2026-10-15 · last updated 15 October 2026

1. Who is responsible

Resthe is operated by MTIRA LLC. For personal data that Resthe decides how and why to use, MTIRA LLC is the controller or equivalent responsible business under applicable privacy law.

Privacy contact: support@resthe.com

For payment transactions processed through Stripe Managed Payments / Sold through Link, Stripe processes payment and order information for its own merchant-of-record, fraud, tax, support and legal purposes. Stripe/Link acts independently for those purposes under its own privacy notices and terms.

2. What we collect and why

Depending on how you use Resthe, we may collect:

• Purchaser contact information, such as the email address associated with the order, so we can deliver the gift, send management or recovery information, provide service notices and respond to support requests. Legal basis where applicable: performance of the contract and our legitimate interests in operating the service.
• Order and payment metadata received from Stripe/Link, such as order identifier, amount, currency, payment status, billing country or address where provided, tax information where applicable, and limited payment-method metadata. Resthe does not receive or store your full card number or CVC. Legal basis where applicable: performance of the contract, accounting and legal obligations, and legitimate interests.
• Dedication information, such as the recipient’s name, purchaser’s name, occasion and message, to create the gift page, certificate and registry entry. Legal basis where applicable: performance of the contract.
• Location information, including the point you select, its coordinates and a place name derived from mapping data, so we can determine the correct moment and local time. Exact coordinates of locations treated as private are not displayed publicly.
• Recipient contact information, only where supplied for delivery or notification. If you provide another person’s contact information, you confirm that it is reasonable to expect that person would welcome receiving the gift or related notice.
• Notification preferences, such as a browser push subscription or email address submitted for a particular gift. Legal basis where applicable: consent or performance of the requested service.
• Launch or wait-list information, if you voluntarily submit it. We use it only for the purpose stated when it is collected, unless you separately agree to something else.
• Usage and funnel statistics, such as page views and purchase steps, using Cloudflare Web Analytics and our own server-side event records. We intend these measurements to be operated without advertising cookies or cross-site profiling. We remember the campaign tags of the link you arrived from (for example utm_source) only for the duration of your visit, in your browser’s session storage, which is cleared when you close the tab, to count which links lead to purchases; these tags contain no personal data. Legal basis where applicable: legitimate interests in measuring and improving the service.
• Technical and security information, such as IP address, request metadata, device/browser information and anti-abuse signals, used for security, rate limiting, fraud prevention, diagnostics and Cloudflare Turnstile. Legal basis where applicable: legitimate interests and legal/security obligations.

We do not sell personal data for money, and we do not use Resthe to build third-party advertising profiles.

3. Payment data and Stripe/Link

When an order is marked Sold through Link, Stripe acts as merchant of record on behalf of the Resthe business for the transaction.

Stripe/Link may collect and use information that Resthe does not control, including payment credentials, billing details, order data, fraud signals, tax information and Link-account information. Stripe may also share order information with Resthe so we can fulfill the order.

Stripe’s use of that information is governed by Stripe/Link’s own privacy notices and Sold through Link terms.

4. How long we keep information

We keep information only for as long as reasonably necessary for the purposes described above, subject to legal, accounting, security and dispute-resolution requirements.

In particular:

• Gift and registry data are intended to form a long-term commemorative record and may be kept indefinitely until the purchaser or recipient validly asks us to delete or anonymize the personal data, unless retention is required by law or needed to establish, exercise or defend legal claims.
• Payment and accounting records are kept for the period required by tax, accounting and legal rules.
• Notification subscriptions are removed or deactivated after the relevant notification purpose ends, unless the user separately asks to keep receiving something.
• Launch-list data is deleted after the stated launch purpose is completed unless a person separately opts in to later communications.
• Security and diagnostic logs are kept for a limited period appropriate to their purpose.

Where we can delete personal data on request, deletion from Resthe does not automatically delete information held independently by Stripe/Link or another provider acting as its own controller.

5. Recipient data

A Resthe gift can contain information about a person who did not place the order.

A recipient may contact us to ask what personal data about them is used by Resthe and, where applicable, to correct, delete, restrict or hide that information. We may need enough information to verify the request before making a change.

If a gift is shown in a public registry, Resthe uses the privacy settings described on the site and does not intentionally publish the recipient’s full name without the relevant permission.

6. Service providers and other recipients

We use third parties to operate Resthe. Depending on the feature used, these may include:

• Stripe / Link — payment processing, merchant-of-record services, indirect taxes, fraud prevention, transaction support, refunds and disputes;
• Cloudflare — hosting or infrastructure, security, Turnstile, analytics and email-routing services used by Resthe;
• Resend — transactional email delivery;
• Geoapify — place search, geocoding, place names and map-related functions, with map data that may include OpenStreetMap contributors;
• browser or device push-notification services, such as services provided by Apple, Google or Mozilla, where the recipient enables push notifications.

We share only the information reasonably necessary for the relevant service, subject to provider terms and applicable law.

7. International transfers

Resthe is operated from the United States and its providers may process personal data in the United States and other countries.

Where applicable privacy law requires a legal mechanism or safeguard for an international transfer, we rely on the mechanism made available for the relevant transfer and provider, such as an adequacy decision, contractual safeguards or another lawful transfer mechanism.

8. Your privacy rights

Depending on where you live and the law that applies, you may have rights to:

• access personal data about you;
• correct inaccurate data;
• request deletion;
• request a portable copy of certain data;
• object to or restrict certain processing;
• withdraw consent where processing is based on consent; and
• complain to the privacy or data-protection authority responsible for your location.

To make a request, write to support@resthe.com. We may need to verify your identity before completing the request.

These rights are subject to legal exceptions. For example, we may have to retain limited transaction information for tax, accounting, fraud-prevention or legal-claims purposes.

9. EEA, EU and UK users

If Resthe specifically offers goods or services to people in the European Economic Area, European Union or United Kingdom, the GDPR or UK GDPR may apply even though MTIRA LLC is established in the United States.

Where the law requires MTIRA LLC to appoint a representative in the EEA/EU or United Kingdom, the representative’s contact details will be published in this policy once appointed.

10. Children

Resthe is not intended for people under 18 to make purchases. A gift may be dedicated to a child, but the purchaser must meet the age requirement in the Terms.

We do not knowingly ask a child recipient to create an account or provide unnecessary personal information.

11. Security

We use reasonable technical and organizational measures intended to protect Resthe data, including access controls and security services provided by our infrastructure vendors. No online service can guarantee absolute security.

12. Changes

We may update this policy as the service, providers or legal requirements change. The current version and update date will be shown at the top of this page.