Privacy

Last updated 13 September 2026

Short version: I store what you put in your gift so the gift can exist, I don't sell anything to anyone, and I don't run ads or trackers.

What I hold

• Your gift. The name, date, letter, sign-off, captions, the YouTube link, and the photos you upload. Stored so the gift can be shown to whoever opens it.
• Your email address. Collected by Stripe when you pay, so you get a receipt and so I can reach you about your purchase if something goes wrong.
• A draft marker on your device. A random code saved in your browser so you can come back to an unfinished gift. It isn't a tracking cookie and it identifies the gift, not you.

I don't use analytics, advertising pixels, or third-party trackers.

What I don't hold

I never see your card number. Payment happens entirely on Stripe's own checkout page — card details go to Stripe and never touch openthis. I only learn that a payment succeeded, for how much, and the email address you gave them.

Who else is involved

• Stripe processes payments. Their privacy policy is at stripe.com/privacy.
• Supabase stores the gifts.
• Vercel hosts the site.
• YouTube plays the song on page four. When a gift opens that page, YouTube receives a request from the viewer's browser and applies its own privacy policy. If you'd rather that didn't happen, leave the song field empty.

None of them get your data to use for their own purposes — they're the tools the site runs on. I don't sell or rent personal information to anyone, for any purpose.

Photos of other people

Most gifts contain photographs of someone who isn't the buyer. If you're in a gift someone made and you'd like it taken down, write to me with the link and I'll remove it. You don't need to explain why.

How long things stay

Published gifts stay until you ask me to delete one, or until openthis shuts down. Unpaid drafts are deleted after thirty days. Payment records are kept as long as tax and accounting rules require.

Your choices

Write to me and I'll do any of these:

• Tell you what's stored about you.
• Correct something that's wrong.
• Delete a gift, or everything associated with your email address.
• Send you a copy of your gift's contents.

I'll act on it within 30 days, and I won't treat you differently for asking. If you're in California, the EU or the UK, you have these rights by law; if you're elsewhere, you have them because it's the right way to run this.

Children

openthis isn't for anyone under 13. I don't knowingly collect their information, and if I learn that I have, I delete it.

Security, honestly

Gifts are reachable only through a long random link that can't be guessed or listed, and everything travels over an encrypted connection. But a gift page is public to anyone holding its link — that's what makes it sendable. Don't put anything in a gift that would hurt if it were forwarded.