Privacy Policy
Last updated 30 October 2026
This policy explains what information Bash (bashit.in) collects, why, and the choices you have. We collect only what we need to run your registry, and we don’t sell your data or show ads.
What we collect
From hosts
- Your name, the occasion, its title, date and your note to guests
- Your email address, if you add one
- Your UPI ID and the name on it, if you turn on cash gifts
- Your gift list, including links, prices, notes and any photos you upload
From guests
- The name and optional note you enter when you reserve a gift
- The name, amount and optional message you enter when you tell a host you’ve sent cash
Stored on your own device
Your browser keeps a small list of the Bashes you made (with their edit links), gifts you reserved, and the name you last typed, so you don’t have to re-enter them. This stays on your device; clearing your browser data removes it.
What we don’t collect
We never see or store bank, card or UPI PIN details. Bash Plus payments are handled entirely on Razorpay’s secure checkout. We don’t use advertising cookies or sell your data.
Usage analytics
We use Microsoft Clarity to understand how people use Bash, for example which buttons are hard to find or where pages are confusing. Clarity records anonymised interactions such as clicks, scrolling and page views, and uses cookies to do this. Text typed into forms is masked so we don’t see it. Microsoft processes this data under its own privacy statement. You can block it with your browser’s cookie or tracker settings without affecting how Bash works.
How we use it
- To show your Bash to the people you share it with
- To stop two guests reserving the same gift
- To email hosts their edit link and, for Bash Plus, alerts about reservations and cash gifts
- To unlock Bash Plus after payment and keep a record of that payment
Who can see what
Anyone with your Bash’s link can see its title, your name, date, note, gift list and UPI ID (if cash gifts are on). Guests see that a gift is taken, but not who took it. Only the host, using the private edit link, can see guests’ names, notes and messages. Your email is never shown to guests.
Services we use
- Supabase stores Bash data and photos (servers in Mumbai, India).
- GitHub Pages hosts the website.
- Razorpay processes Bash Plus payments. It receives the details you enter at checkout under its own privacy policy.
- An email delivery service sends emails to hosts who added an email address.
- Microsoft Clarity provides anonymised usage analytics.
- Google Fonts and Cloudflare’s cdnjs deliver fonts and a QR-code helper, which means your browser connects to them when loading pages.
How long we keep it
We keep a Bash until its host deletes it. Deleting a Bash permanently removes its gifts, reservations, messages and cash-gift records. We keep a record of Bash Plus payments for as long as tax and accounting law requires.
Your choices and rights
Hosts can edit or delete their Bash at any time from its edit page. Anyone can ask us to access, correct or delete information about them by emailing hello@bashit.in. We handle personal data in line with India’s Digital Personal Data Protection Act, 2023.
Children
Bash isn’t meant for children to use on their own, and we don’t knowingly collect information from anyone under 18 without a parent or guardian’s consent.
Changes
If we change this policy in a meaningful way, we’ll update the date above.
Contact
Privacy questions or requests: hello@bashit.in.