The data controller for Merry & Sorted is 3lb savjetovanje i usluge, vl. Rusalka Majer, Ulica Jurja Križanića 22, Varaždin, Croatia, OIB: 02074784223. You can reach us at hello@merryandsorted.com. This policy explains what personal data we process when you use Merry & Sorted, why, and what rights you have.

• Account data: your email address, an optional display name and your password (stored only as a secure hash by our authentication provider).
• Planner content you enter: gifts, budgets and expenses, guests (including any names, emails, phone numbers or dietary notes you add about them), menus, shopping lists, tasks, event details and mood board images.
• Technical data: sign-in timestamps, plan status and usage counters, and server logs needed to run and secure the service.
• Anonymous quiz results: if you take the planner-type quiz, we record its result or skip. If you sign up after taking the quiz, its result may also be stored with your profile.

• To provide your account and planner, and to send service emails such as sign-up confirmation, password reset and a welcome message (performance of our contract with you, GDPR Art. 6(1)(b)).
• To issue invoices and meet tax and accounting obligations (legal obligation, GDPR Art. 6(1)(c)).
• To keep the service secure, prevent abuse and fix errors (our legitimate interest, Art. 6(1)(f)).
• To understand which planner types use the app, using quiz results (legitimate interest, Art. 6(1)(f)).
• Analytics and marketing: consent (GDPR Art. 6(1)(a)), withdrawable any time in Cookie settings.

Stripe processes payments for plans you choose. We send your account email and account identifier to create a billing account, and store Stripe customer and subscription identifiers, plan status and billing dates. We do not store your full card details. Withdrawal requests store your account email, subscription identifier, request date and handling status so support can process the request. After each payment we issue an invoice to the billing details you gave Stripe.

When you request an AI suggestion with Premium, we send the details needed by that helper through Lovable AI to the selected model provider. Gift requests include the nickname, interests, optional age, relationship and budget you enter. Menu requests include meal preferences and dietary restrictions. Budget requests include totals, category spending, occasion and guest count. Task requests include event date, location and theme, dish names, gift purchase status, budget amount and existing task titles. Guest contact details, images and account email are not included in AI requests. Use nicknames and avoid sensitive information. Only ideas you choose to add are saved in the planner.

• Lovable Cloud (Supabase): hosting, database and sign-in.
• Lovable: delivery of sign-in and service emails.
• Stripe: payment processing and subscription management.
• FIRA: invoicing and fiscalisation service. When you pay, we send your name, billing address, email and tax number (if you provide one) so that your invoice can be issued.
• Lovable AI and the selected model provider: generating suggestions you request. The default model provider is Google.
• Google Fonts: delivers the app's font, which means your browser's IP address is sent to Google when a page loads.
• Holo: delivers some articles on our blog page, which means your browser's IP address is sent to Holo's server when you open the blog. It sets no cookies.
• Microsoft (Clarity): analytics, heatmaps and session recordings, only if you accept Analytics cookies.
• OpenAI: advertising measurement pixel, only if you accept Marketing cookies.
• Meta (Meta Platforms Ireland Ltd.): Meta Pixel advertising measurement for Facebook and Instagram ads, only if you accept Marketing cookies. Meta may transfer data to the US.

Some of these providers may process data outside the European Economic Area. Where they do, the transfer is covered by the European Commission's Standard Contractual Clauses or an adequacy decision.

We keep your data for as long as your account exists. When you delete your account in Profile, your planner data and your sign-in account are deleted after billing cancellation has been confirmed. Payment providers may retain payment records needed for accounting or legal obligations. We retain withdrawal requests and the email needed to respond after account deletion to handle requests and meet applicable legal obligations. Copies may remain in our hosting provider's routine backups until those backups expire. Invoices and related billing data are kept for the period required by Croatian tax and accounting law, even after you delete your account.

You have the right to access, correct, delete, restrict or object to the processing of your personal data, and the right to data portability. In Profile you can download a copy of your data as a JSON file and delete your account yourself. For anything else, email hello@merryandsorted.com.

You may also complain to a data protection authority. In Croatia this is the Personal Data Protection Agency (AZOP), azop.hr.

Strictly necessary: browser storage that keeps you signed in, remembers your preferences (such as currency) and stores your cookie choice. The installed app may cache previously loaded pages on your device; current planner data and saving still need internet.

Analytics (only with your consent): Microsoft Clarity records heatmaps and session recordings of how you use the app. It sets its own cookies such as _clck and _clsk, and Microsoft may process data in the US. Form fields and guest details are masked in recordings. We also send Clarity named events for steps such as clicking a sign-up button, starting or finishing the quiz, sign-in and sign-up results and printable downloads; these events carry only the step name, not emails, form values or other personal data. Team members can tag their own browser as internal (stored as "ms_internal" in local storage) so their visits are labelled in Clarity.

Marketing (only with your consent): the OpenAI advertising measurement pixel measures whether our ads on OpenAI products lead to sign-ups. The Meta Pixel sends page views, your browser's IP address and browser details to Meta so we can measure our Facebook and Instagram ads; it sets the _fbp cookie and, when you arrive from one of those ads, the _fbc cookie (both 90 days). We do not send your email or other account details to Meta. If your browser sends a Global Privacy Control signal, the Meta Pixel is not loaded.

You can change or withdraw your choice any time via "Cookie settings" in the footer or menu.

Merry & Sorted is not intended for children under 16. We do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.

Data is encrypted in transit, access to each account's data is enforced by the database, and passwords are never stored in plain text. No online service is completely secure, so please use a unique password.

When we change this policy, we update the date above. For significant changes we will also tell you by email or in the app.