Privacy

What we keep

If you sign in: the name, email address and picture your provider (Google, Facebook or LINE) hands us. We never see your password, and we do not ask for permission to post anything as you.

What you make: the words you write, the recipient's name, and any photos you add to a surprise.

Openings: when a surprise was opened and from which country, so you can tell whether it reached them. We do not store IP addresses or anything finer than the country.

What we do not do

We do not sell your data, or trade it with anyone.

There are no advertising trackers, no Google Analytics, no Facebook Pixel. This site loads no tracking scripts at all.

We do not send you marketing email.

Cookies

Two of them. One keeps you signed in for 30 days. The other lasts ten minutes while you are signing in, and exists to stop request forgery. Both are strictly necessary; there are no advertising cookies.

Who can see your surprise

Anyone holding the link. Links are random enough not to be guessed, but they carry no password — if you forward one, it opens.

Surprise pages are never offered to search engines for indexing.

Deleting things

Delete surprises one at a time from “My surprises”.

Close your account from “Account”. Everything — surprises, photos, opening history — is deleted from the database at that moment, not hidden.

Where it is stored

The database is hosted by Neon and images by Vercel Blob. Both are infrastructure providers; neither uses the contents for anything of their own.

Getting in touch

Questions, or a deletion request: pleumkj@gmail.com