HappyDays

Privacy Policy

Last updated:

This policy explains what information HappyDays (ימים שמחים) at happy-days.co.il collects, what it is used for, who it is shared with, how long it is kept and what your rights are. It applies to event organizers, celebrants and anyone browsing the Site, and forms an integral part of the terms of use.

We respect your privacy and protect users' details, photos and content. We do not sell, rent or trade your information, and we do not pass it to any third party for any purpose other than operating the Service.

1. Who is responsible

The Site is operated by Hadas Metzger, who is responsible for the information collected on it. Privacy requests: through the contact form or by email to hadasm293@gmail.com.

2. What we collect

  • Account details: email address, name (if given) and password — the password is stored hashed and we cannot see it.
  • Event details: the celebrant's name and email, event type, dates and lock settings.
  • Media files and content the organizer uploads: photos, videos, recordings and audio files, documents and texts.
  • Payment details: amount, package and the reported method (Bit / transfer). We do not collect or store credit-card or payer bank-account details.
  • Messages sent through the Contact form.
  • Anonymous usage statistics (page views and loading speed), without tracking cookies.

3. How we use it

  • Running the event and showing it to the celebrant at the set times.
  • Transactional emails only, about the service ordered: order confirmation; an email to the celebrant and the organizer when the first lock opens and when the last one is opened (with a link to the souvenir album); a reminder to the organizer before the event is deleted; and replies to support requests.
  • Handling payments, messages and support requests.
  • Securing the Site, preventing abuse and improving the Service.

From time to time we send all registered users service messages that are not advertising (e.g. changes to the Terms or to how the Site operates).

Advertising and marketing email (sales, discounts, holiday greetings) is sent only to those who explicitly ticked the consent box when registering or creating an event — the box is never pre-ticked — as required by the Israeli Communications (Telecommunications and Broadcasting) Law, 5742-1982. Every such email is marked "פרסומת" (advertisement) at the start of its subject, and every email includes a link to unsubscribe at any time.

4. Third-party providers and sharing

To run the Site we use infrastructure providers that process data on our behalf only, under security and confidentiality obligations, and may not use it for their own purposes:

  • Supabase — the database and file storage (photos, videos, recordings and documents).
  • Resend — delivery of transactional emails.
  • Vercel — hosting the Site.

Data is stored on servers outside Israel (in the European Union and the United States), with providers that apply accepted security measures.

If an organizer embeds a YouTube video, it is served by YouTube under Google's privacy policy.

Other than that, information is not sold or passed to third parties. It is disclosed to authorities only when required by law.

5. Security

  • All communication with the Site is encrypted (HTTPS).
  • Each organizer can see and edit only their own events; the admin dashboard is available to site administrators only.
  • The site's management may view events, boards and the content uploaded to them solely for service, technical support, handling problems and inquiries, and enforcing the Terms — and for no other purpose. The information is not passed on to others in this context.
  • The celebrant sees a lock's content only through the event's unique link, and only after its opening time and solving the challenge.
  • Files are stored at unique, unpublished addresses. Anyone holding the event link can view the event — so share it only with the celebrant.

No system is completely immune, but we take reasonable, accepted measures to protect your information.

6. Retention and automatic deletion

Every event — with all the media files and content uploaded to it (photos, videos, songs, recordings and documents) — is automatically and permanently deleted 14 days after the event date, and cannot be restored. 4 days before deletion the organizer gets an email reminder.

Until then the personal souvenir album (PDF), the audio files and the videos can be downloaded — from My events (the organizer, at any time) or from the event board (the celebrant, once the last lock is open).

Account details themselves are kept while the account is active. Payment records are kept as required by law.

7. Your rights

Under the Israeli Privacy Protection Law, 5741-1981, you may ask to review the information kept about you, correct it, or delete your account and all content — through the contact form or by email to hadasm293@gmail.com. We handle every request promptly.

8. Cookies

The Site uses only essential cookies — to keep you logged in. Usage measurement is anonymous and cookie-free.

9. Changes

We may update this policy from time to time. The binding version is the one on this page; the last update date appears at the top.