Privacy

Your memories are personal. These are the rules for this first version, updated November 2, 2026.

What we store

We store the processed photos, messages, names you enter, and settings needed to display your gift. Photo metadata is removed. There is no account registration. The private key is kept in your browser; the server stores only its cryptographic hash.

Sharing and access

Anyone you share its unlisted link or QR code with can see it, and they can forward it. Gifts are kept out of search indexes. Keep your separate management link and recovery key private.

Retention and deletion

Drafts last 7 days. Free gifts are available for 30 days after publication; Plus for 365 days after upgrade. Access stops at expiry. Expired records are removed through service maintenance. You can immediately delete your gift and photos from its management page. Copies saved by recipients are outside our control.

Measurement and payments

We record basic actions such as creating, sharing, opening, and returning a gift, without including your messages or photos. A random session identifier helps measure use; there are no advertising cookies. Events are retained for up to 90 days through maintenance. When enabled, Stripe processes payments. We do not store card numbers. Transaction identifiers are retained for purchase recovery and reconciliation.