Privacy

Short version: we keep very little, we sell none of it, and you can have it deleted by asking.

You don't need an account

• All five gifts: made, sent and opened with no sign-in and no email. Not a trial. It's how the product works.
• The two paid ones work the other way round. Build either without an account; publishing needs one, so something you paid for stays something you can get back into. That covers the Digital Advent Calendar and Our Story.
• Whoever receives any of them never needs an account, or an email address, or anything at all. That has never changed.
• Signing in exists so a browser's worth of things survives a new phone.

What we store

• The gift: names, message, choices, photos. Kept as long as the gift is.
• A calendar also: the start date and timezone (it's a clock), which boxes were opened and when, and anything written back.
• A scrapbook also: its moments and their photographs, which you can keep adding to; that it was opened and when; and whether they told you they had read it.
• An email address for a scrapbook: optional, asked for while you build. Two uses and no others: sending you the edit link so you cannot lose it, and telling you the first time it gets opened. Not marketing, and never passed on.
• If you sign in: your email; from Google, your name and picture. A password is stored scrambled, so nobody here can read it back.
• Your garden: bouquets kept, where you planted them, what you called them.
• Opens: that a gift was opened and when, against a random id in the lovah-v cookie. A number, never linked to an account, so a sender sees “three people opened this” rather than a meaningless total.
• An email you gave us for news: and which page you gave it on. Every message has an unsubscribe link.

Somebody else's email address

If you buy one

• Your card never reaches us. Razorpay show their own form and handle it. There is nowhere in Lovah a card number could be stored even by mistake.
• Against your gift we keep: which size, that it's paid, the amount, the date, and Razorpay's order and payment references, which are how a charge you don't recognise gets found again. Kept as long as the gift is, and as long as tax rules require.
• There are two things here that cost money: the Digital Advent Calendar and Our Story. Everything in this section applies to both, and to nothing else on the site.
• A receipt is emailed to you, and your account shows what you bought. Purchases are final. See refunds.

Where the photographs go

• Supabase storage in Mumbai, for every product.
• A scrapbook's photographs sit in a private bucket. They are not on the open web at any address. Each one is served through a signed link that expires within a day and is minted fresh each time the page is drawn, so a link copied out of the page stops working.
• Location data is stripped from a photograph before it is uploaded. It is re-drawn in your browser, so there is no metadata left to carry.

Cookies

Three, all first-party. No third party sets a cookie through Lovah.

• lovah-auth: keeps you signed in. Unreadable by page scripts.
• lovah-v: the random open-counting id above. Also unreadable by page scripts.
• lovah-who: your first name and companion, so the header greets you instantly. Readable by the page on purpose: it's only what the header is about to show you, and it never decides what you may see.
• No advertising cookies and no advertising trackers. Nothing here follows you to another website.
• We count visits. Vercel Web Analytics tells us how many people opened a page and which page it was. It sets no cookie and stores nothing on your device, it cannot see who you are, and it cannot follow you off Lovah. We use it to know whether anybody is finding us, and for nothing else.
• Your garden, your gifts and a pointer to an unfinished calendar sit in your browser's own storage. The pointer is a link and a name, never the words you wrote. Clearing browser data clears the lot.
• Opening or making a scrapbook adds two more to that storage: sb-session (a random id, so one person opening it six times can be told from six people opening it once) and sb-token (the way back into one you have started making, before there is an account to keep it under). Neither is an advertising id and neither leaves your browser.

Who else touches it

• Supabase: database, sign-in, photos. Mumbai.
• Vercel: hosts the site, and counts the visits described above.
• Google: only if you Sign in with Google. Your email, name and picture; never your password.
• Razorpay: only if you buy one. Nothing is sent to them otherwise.
• Resend: delivers the emails, including the sign-in links, a receipt, and the scrapbook edit link and first-open notice sent to an address you gave without making an account.
• Spotify or YouTube: only if a sender attached a song.

That is the whole list. We do not sell your information to anybody. Not your email, not your gifts, not the fact that you bought something.

Getting rid of it

Children

• 13 or over; under 18, with a parent alright with it. The terms say the same.
• We don't knowingly keep anything about a child under 13. If you think we have, write to us and it goes.

Changes

• If this page changes, the date at the top changes with it.
• If it changes what we do with something you already gave us, we email the people affected rather than quietly editing the page.

Asking us anything

hello@lovah.social. A person reads it.