Effective [DATE]. We collect the minimum needed to make and deliver a certificate. We contact a gift recipient once, to deliver the gift, and never market to them.
| Data | From whom | Why |
|---|---|---|
| Your name and email | You, the buyer | Deliver your order and support; your name is shown to the recipient as you entered it |
| The recipient's name and personal note | You, about someone else | Printed on the certificate (name) and shown on the recipient's page (name and note) |
| The recipient's email address | You, about someone else | To send one email delivering the gift; never used for marketing |
| Whether the recipient has viewed the certificate | Generated by the site | To tell you, once, that it was viewed |
| Payment details | Stripe (last four digits and billing country only) | Payment, tax, refunds |
| Order metadata (parcel code, region, dates, discounts, promotion code, how you arrived) | Generated by the site | Fulfillment, fraud prevention, attribution |
| Basic usage events (opened, downloaded, shared) and analytics | Your browser | Improving the site; no cross-site ad tracking |
| Report submissions, including the reporter's email | Anyone who reports | Handling misuse and removal requests |
People named on certificates. We use a holder's name to print the certificate and, if the holder chooses, to list it on the verify page. Names are never searchable. Anyone named on a certificate can ask us to hide or remove their name, or to revoke the certificate.
Gift recipients. If a buyer chooses email delivery, we send the recipient one email about the gift. We send no reminders and no marketing, and we don't email that address again unless that person later buys from us. If an address is reported, we can stop emails to it. We keep only a one-way fingerprint (hash) of a blocked address, not the address itself.
Who processes data for us. Stripe (payments and tax), Vercel (hosting and analytics), Supabase (database) and Resend (email). We don't sell personal information or share it for advertising.
Cookies. One first-party cookie remembers how you arrived (30 days). No advertising cookies.
Retention. Order and payment records are kept for [7] years for tax and accounting. Holder names stay so the certificate keeps working, unless removed on request. Unpaid orders are deleted after 24 hours.
Your choices. Email [CONTACT EMAIL] or use the report form to access, correct or delete your information, or to have your name hidden or removed. We respond to privacy requests within 30 days.
Children. The site is for adults. We don't knowingly collect information from children under 13. Certificates naming a minor are allowed only when the buyer is that minor's parent or guardian.
Changes and contact. Updates will change the effective date above. Questions: [CONTACT EMAIL].