Privacy Policy
Last updated: 6 November 2026
What we collect
When you create an experience, we collect the content you provide — names, photos, messages, and voice notes — to build your personalized site.
When your link is opened
The person who made a surprise can see whether their link has been opened and roughly when — and, where the experience asks a question, the answer that was given. That is the whole of it. Opening a link does not record the recipient's IP address, location, device, or a log of their visits, and the creator is never shown anything beyond “opened” and a rough time. Repeat visits within a few hours count once, so the creator cannot tell how many times a page was re-read. If you are the recipient of a Smitten You link, this is what the person who sent it can see.
Writing back
Some pages (Apology, Anniversary and Ask Them Out) let the person who opens them write a short note back. If they do, only the text and the time are kept, with no name, IP address or device, and it can be read only by the account that made the page. It is never shown on the page, and it is deleted when the page is deleted. If you have email notifications on, we send you a short email saying a reply arrived, without the reply itself.
Analytics
We measure how people move through our own site — landing page, creator, publishing — so we can see where it confuses people. It is cookieless and not tied to an identity. It does not run on recipient pages at all.
Error reports
If a page breaks — including a recipient's page — a short error note is saved in our own error log so we can fix it. It contains what went wrong, the page address (with the private part of a recipient's link removed), and the browser and device type. It has no names, no IP address and no cookies, it is not tied to an identity, and the creator never sees it. We may also use an error-monitoring provider (Sentry) for the same purpose, under the same rules, and we strip IP addresses and cookies before anything is sent to it.
How recipient sites work
Personalized recipient sites are not publicly listed or indexed. They are accessed through a unique private link you share. Recipient pages include a noindex directive by default so search engines won't surface them.
Your media
Photos, voice notes, and other media you upload are stored securely and are never used in public galleries, marketing materials, or shown to other users without your explicit consent. If a video is too large to upload, you can add a Google Drive link instead: the video then stays in your own Google Drive, we keep only the link, and the person you share with watches it from Google, so Google's privacy policy applies to that video. You choose who can open it with Drive's sharing settings. Anyone who receives a page can report it from the link at its foot; reports are read by us, kept only to act on them, and the person who made the page is not told who reported it. Deleting a surprise from My Surprises takes its link offline and permanently removes the photos, voice notes and videos you uploaded for it, along with any notes written back to it (a video you kept in your own Google Drive stays there until you delete it).
What we don't claim
We do not claim end-to-end encryption or absolute privacy. Shared links can be forwarded by the recipient. Use this platform for personal gifting, not for storing sensitive personal data.
Contact
For privacy questions, contact us at yourfrstcar@gmail.com, or through the Contact page.