Privacy policy

I Made You This is run by [Your trading name] in the United Kingdom, who is the data controller for the information described here. We collect as little as we can and we do not sell anything about you to anyone.

What we collect

• Account: your email address and a password, which is stored hashed so we cannot read it.
• Your pages: the words you type and the photos you upload, plus the link you choose.
• Payments: handled by Stripe. We see that you paid, how much and a reference. We never see your card number.
• Usage: a count of how many times each page has been viewed. We do not record who viewed it. Our servers keep short-lived logs that include IP addresses for security.
• Reports: if someone reports a page we keep the reason and their IP address so we can deal with abuse.

What we use it for

• To show your page to people you share the link with.
• To let you log in, edit and renew.
• To email you your link, a reminder before your page expires, and a note when it has.
• To take payment and deal with refunds.
• To keep the service safe and respond to reports.

Our legal basis is the contract you make with us when you buy a page, and our legitimate interest in running a safe service. We do not send marketing emails.

Photos of children

Many pages include photos of children. They are stored privately and only shown on the page they belong to, to people who have the link. Pages are hidden from search engines. Photos are deleted 90 days after a page expires, or straight away if you remove them or delete your account.

Who else sees it

We use a small number of services to run I Made You This. Each only gets what it needs.

• Supabase stores the database, accounts and photos.
• Vercel hosts the website and counts page views.
• Stripe takes payments.
• Resend sends our emails.

Some of these companies process data outside the UK, under standard contractual safeguards. We do not share your data with anyone else unless the law requires it.

Cookies

We use one cookie, which keeps you logged in. There are no advertising or analytics cookies, which is why there is no cookie banner. Your unfinished draft is kept in your own browser until you create an account.

Counting visits

We count page views so we know which parts of the site people use. This is done by Vercel Web Analytics, which sets no cookies and cannot follow you to other websites. It records the page, a rough location from your IP address, and what kind of device and browser you are on. It does not record who you are. When someone opens a page you have shared, we count the visit but deliberately leave the link itself out, because that link is private.

How long we keep it

• Live pages: until the length you paid for runs out, then 90 days more in case you renew, then deleted. You can also delete a page yourself at any time, from your dashboard, which removes it and its photos and voice note straight away. Taking a page down instead hides it from everyone but keeps it, and does not change these timings.
• Unpaid drafts: photos are removed after 7 days, the text stays with your account.
• Accounts: until you ask us to delete them.
• Payment records: 6 years, as UK tax law requires.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, or object to how we use it. Email [hello@yourdomain] and we will reply within a month. You can also complain to the Information Commissioner’s Office at ico.org.uk.

Changes

If we change this policy we will update the date at the top. Questions go to [hello@yourdomain].