PRIVACY

Your words deserve a clear explanation.

This notice describes the current site. Last updated: October 20, 2026.

Local drafts and downloaded backups

The maker saves your draft in this browser’s local storage. Draft information can include names, cities, dates, a title, your letter, compressed photos, memory text and style preferences. Local drafts are stored as readable data, not encrypted by this site. Someone with access to your browser or device may be able to read them.

A downloaded complete backup contains readable personal content, including the small photo copies, plus saved gift links and their deletion keys. These links include access to the gifts. Keep the backup private: a person who obtains it may be able to read the gifts or delete them. Importing a complete backup replaces the local draft after confirmation and restores its saved gift links and deletion credentials. Older draft-only files do not contain those credentials.

Clearing the draft removes the current local draft. It does not delete published gifts. If a saved draft cannot be restored, the app may retain a local recovery copy rather than discard it; clearing this site’s browser data removes local storage copies. Clearing browser data can also remove saved gift links and deletion keys. If storage is blocked or full, saving may fail; the maker displays a notice so you can keep a draft backup.

Photos

Selected photos are processed into smaller keepsake copies in your browser. The original files are not uploaded by the maker. The compressed copies become part of your draft and, if you publish, part of the encrypted gift snapshot. Keep your original photographs separately.

Published snapshots and complete-link access

When you publish, your browser encrypts the gift with AES-256 before upload. The server stores the encrypted content. The decryption key is placed in the URL fragment, the portion after the # character, rather than in the normal HTTP request sent to the hosting server. The gift reader uses that key in the recipient’s browser.

The complete link is the access credential. Anyone who receives it can open the gift, copy its contents, or forward the link. This is not an authenticated account or a password-protected invitation. A service you use to send the link may handle the full URL under its own policies.

Gifts are unlisted, not included in the public sitemap, and the gift reader is marked noindex. These measures do not prevent a recipient from sharing the link elsewhere. Do not include material you are not comfortable entrusting to the intended recipient.

Retention and deletion

Published encrypted snapshots remain stored until deleted; there is no automatic expiry. Each gift has a separate deletion credential saved in the creator browser. Use Backups & saved gift links to delete a published gift from that device. This removes the stored gift so its link no longer retrieves it, but cannot erase copies already downloaded, printed or retained by someone else.

If you lose the creator browser’s data, you can restore deletion credentials from a complete backup made after the relevant gift was published. A backup cannot contain gifts or keys created after it was downloaded, and an older draft-only file does not restore them. If both the local credentials and complete backup are lost, contact us about a privacy concern; do not assume a lost key can be recovered or that we can verify every deletion request from a link alone. Editing or clearing a draft does not alter previously published snapshots.

Website delivery and contact

Hosting and storage infrastructure receives technical information needed to operate the service, such as request metadata, IP addresses and browser information. The site is hosted on Vercel; see Vercel’s privacy policy for its handling of service data. Site fonts are hosted with this website.

If you email us, we receive what you choose to include and use it to respond and investigate the request. For privacy questions, contact lautaro@deadcow.xyz.

Advertising and analytics

We do not currently run advertising scripts, third-party analytics or social tracking pixels. The public site includes Google AdSense verification information, but no ads are being served. This notice and any required privacy controls will be updated before advertising or analytics is enabled.