Privacy

What we keep

If you sign in: the name, email address and picture your provider (Google, Facebook or LINE) hands us. We never see your password, and we do not ask for permission to post anything as you.

What you make: the words you write, the recipient's name, and any photos you add to a surprise.

Openings: when a surprise was opened and from which country, so you can tell whether it reached them. We do not store IP addresses or anything finer than the country.

What we do not do

We do not sell your data, or trade it with anyone.

There are no advertising trackers, no Google Analytics, no Facebook Pixel. This site loads no tracking scripts at all.

We do not send you marketing email.

Cookies

Two of them. One keeps you signed in for 30 days. The other lasts ten minutes while you are signing in, and exists to stop request forgery. Both are strictly necessary; there are no advertising cookies.

Who can see your surprise

Anyone holding the link. Links are random enough not to be guessed, but they carry no password — if you forward one, it opens.

Surprise pages are never offered to search engines for indexing.

The face in “A Heart for You”

That template builds a portrait out of hearts from one photograph. A photograph of a face is personal data, so it is handled differently from every other picture here.

It is cropped in your browser before it is sent. Whatever you cropped away never leaves your device.

The file is stored privately. There is no URL anybody can find it at; the person you sent the link to loads it through this site, and only while that link still exists.

It is kept for as long as the surprise is. Delete the surprise or close your account and the file itself is deleted, not just the row that pointed at it.

Adding one needs an account, because deleting a surprise does. A picture of a person that could not be taken down should never have gone up.

If it is someone else, you need their permission first.

If your face is in a link you did not agree to

Every surprise has a “Report this” link at the foot of the page. It opens an email to us with the link already in it — or write to pleumkj@gmail.com directly.

We will look and take it down. You will not be asked to justify yourself at length.

Deleting things

Delete surprises one at a time from “My surprises”.

Close your account from “Account”. Everything — surprises, photos, opening history — is deleted from the database at that moment, not hidden.

Where it is stored

The database is hosted by Neon and images by Vercel Blob. Both are infrastructure providers; neither uses the contents for anything of their own.

Gallery photos are stored publicly on the CDN. The face used by “A Heart for You” is stored privately.

Getting in touch

Questions, or a deletion request: pleumkj@gmail.com