Privacy

What we collect

• The names, message and design choices you put on a card.
• Email addresses you choose to provide for delivery, receipts and reply notifications. These are optional.
• Details you type to personalize the message (personality, memories, occasion details). They are sent to our writing assistant to draft your message and are not stored on the card record beyond the final message you approve.
• Reactions and replies a recipient submits, associated with the card.
• Anonymous funnel events (for example “card opened”) tied to a random browser id, never to your name or email.
• Payments are processed by Stripe. We receive a payment reference and amount; we never see or store card numbers.

How cards are kept private

Each card has a 192-bit random link. Links are not listed anywhere, are excluded from search engines, and share previews never include the message or recipient name. Replies are only visible on the sender's private management page.

Anti-abuse data

To prevent duplicate reactions and spam without requiring accounts, we store a salted hash of a visitor's IP address and browser. The hash cannot be reversed to identify anyone.

Retention

Unpaid drafts are deleted after seven days. Published cards remain available so recipients can revisit them. To request deletion of a card and its replies, use the contact link on your management page or email the address shown there.

Third parties

Stripe (payments), our email provider (delivery and notifications, when configured) and our writing-assistant provider (message drafts). Each receives only what it needs to perform that function.