senddearly♥

Draft: this page hasn't been legally reviewed and isn't final.

Privacy policy

This policy explains what information senddearly handles and why.

Last updated: [Date you publish this page]

Who is responsible for your data

[Your legal business name], [Your business address], is responsible for your personal data. You can contact us at [Your contact email].

Your gifts

When you create a gift, we store what you wrote and the template you chose in our database, hosted by [Your database provider, for example Supabase] in [Region where your data is stored]. We use it only to show the gift to people who open its link.

If you're logged in when you make a gift, it's linked to your account and listed under My gifts, where you can delete it. Deleting your account deletes all of its gifts.

We keep saved gifts for [How long you keep gifts]. To ask us to delete a gift you made without logging in, email [Your contact email] with its link.

If you report a gift, we store the reason and any details you write, but not who you are.

If you open a gift and send a reaction, we store the feeling you picked and any note you write, but not who you are. Only the person who made the gift can see it, and it's deleted with the gift.

If you schedule an email of your gift, we store the recipient's email address and the time to send it. The email is sent by our email provider, Resend, and says that a senddearly user scheduled it. We delete the address about a week after the email was due, or straight away if you cancel or delete the gift. Only enter the address of someone who'd expect a gift from you.

If you received a gift by email from us, we got your address from the person who scheduled it. We don't use it for anything else, and we don't add you to any mailing list.

To prevent spam, we store your internet (IP) address together with a count of recent actions, such as gifts made or photos uploaded. These counts are deleted after about a day.

If saving isn't available, your gift is kept in the part of the link after the # symbol instead. Browsers don't send that part to our servers, so we don't receive it.

If you add photos, they're shrunk in your browser and stored in [Your database provider]'s file storage. Hidden details such as the photo's location are removed first. Anyone with the photo's address can view it, so only add photos you're happy to share.

If you add a Spotify or YouTube song, the gift shows that service's player. Spotify or YouTube may then collect information under their own privacy policies.

Anyone who has a gift's link can open it. Apps you use to send it, such as messaging services, may handle the link under their own privacy policies.

Your account

If you create an account, we store your email address and a securely scrambled version of your password with our login provider, [Your database provider]. We never see your password.

If you sign in with Google or Apple, they share your name and email address with us. With Apple, you can choose to hide your real email address.

To delete your account, email [Your contact email] from the address you signed up with.

Payments

senddearly doesn't take real payments at the moment.

Cookies and analytics

senddearly doesn't currently set cookies or use analytics or advertising trackers.

Our demo checkout saves demo orders in your browser's local storage, on your device only. We don't receive them, and you can clear them on the Your purchases page. It never stores card numbers.

Hosting

Our hosting provider, [Your hosting provider], may record technical data when you visit, such as your IP address and browser type, to keep the site running and secure. This is kept for [How long your host keeps logs].

Our legal basis for this is [Legal basis: to be confirmed with your lawyer].

Your rights

Depending on where you live, you may have the right to access, correct or delete your personal data, or to object to how it's used. Contact us at [Your contact email] to ask.

You can also complain to your local data protection authority: [Your data protection authority].

Changes to this policy

We'll update this page and its date if our practices change.