Privacy, thoughtfully.

We collect the names, relationship, message, optional memory/photo, buyer email and order information you provide to create and manage your gift.

Personal writing

For AI generation, we send the names, relationship, selected language, message and optional memory to OpenAI. Your buyer email is not included in that writing request. Uploaded photos are processed and hosted by us, not submitted to the writing model. Provider retention is governed by its applicable terms.

Payments and email

Razorpay handles payment information. We store payment references and status, not card credentials. Hostinger SMTP delivers receipts, recovery and status messages. Keep recovery links private.

Unlisted links

Anyone holding or receiving a published gift link can view it and its photo. Unlisted does not mean authenticated or restricted to one person. Gift pages request search engines not to index them.

Essential sessions and order measurement

Essential session cookies support checkout, secure editing, recovery and duplicate-interaction controls. We record order milestones and deliberate gift interactions on our own service. Campaign labels or the referring search platform may be retained with an order to understand how buyers found us.

Simple first-party visitor counts

We count successful visits to a fixed list of public marketing, fictional demo and policy pages on our own server. These page totals contain only a day, public page label, broad referral category and device category. They do not store IP addresses, full user-agent strings, query values, customer names, emails or private gift/order/recovery addresses.

If you allow analytics cookies using Analytics choices, we also keep a random anonymous browser reference in local storage for up to 30 days to estimate visitors. Only a keyed hash of that reference and the day are stored on our server. It is not linked to an order, payment, email or gift. Declining analytics clears this browser reference and prevents further visitor measurement. Cookie-free page totals can still increase. Signed-in admin activity and common automated requests are excluded where identifiable. Daily traffic counts and visitor hashes older than 90 days are cleared during the next counter update.

Google Analytics on public pages

Our public marketing pages, fictional demo and support/policy pages use Google Analytics to measure visits and clicks toward the demo or gift creation. Google may receive limited cookieless measurement before you make a choice. Analytics cookies remain disabled until you allow them. Advertising storage, ad personalisation and Google signals are disabled in this implementation.

We do not load this Google tag on customer gift pages, order management, recovery, admin or gift creation forms. Customer names, letters, messages, photos, payment references and management links are not supplied to Google Analytics by this integration. Page addresses and referrers are sanitised; arbitrary query strings and fragments are excluded. Only a small allowlist of public campaign labels is forwarded.

Use the Analytics choices button on a public page to allow or decline analytics cookies. Your choice is saved in this browser. Blocking or declining analytics cookies does not prevent creating a gift. Google processes measurement information under its own privacy policies; this feature does not mean a gift is anonymous or password-protected.

Retention and removal

Unpaid drafts are normally removed after seven days. Gifts are hosted for 12 months from payment; gift content and photos are scheduled for removal within 30 days afterward. Minimal payment and refund references may be retained longer for accounting and disputes. Email support@surpriselinks.in or call +91 8688 587016 to request removal or report a privacy issue.