Privacy Policy

What we hold. Your name, mobile number, email address and date of birth, because an account needs them. Anything optional — city, anniversary — is yours to leave blank. Your cards, their messages and any photos you add belong to you and are private until you publish them.

What recipients see. Only the card: the occasion, the style, the names on it, your message and the photos you attached. Your email address, mobile number, date of birth and account details are never sent to the page they open.

What we measure. Whether a card was opened, whether its moment was played through, and whether the card was revealed — so you can see if your card landed. We do not record IP addresses, device fingerprints or anything identifying about the person opening it.

Deleting. Deleting a card removes it, its photos and its link. Deleting your account removes everything you own, including cards you have already shared.

Placeholder text pending legal review before launch. Retention periods are still to be set — see ARCHITECTURE.md.