Sendable Cards

Privacy, in plain words.

Last updated: October 3, 2026

We email you only about reminders: ones you've confirmed, or, if you signed up on the earlier site, holiday reminders you can turn off at any time.

Cards are public through their links

Anyone with a card link can read and forward its message, artwork, sender, recipient, and occasion. Treat the link as public.

Cards do not appear in our browse pages. Card pages ask search engines not to index them. This does not restrict access.

Link previews include the sender, optional recipient, occasion, and artwork.

What this application stores

The database stores your card, personal details, generation instructions, and a hash that identifies the browser allowed to edit. Artwork is stored in public Vercel Blob storage.

It also stores request records and quota counters. This version has no automatic deletion schedule or card deletion interface.

Public responses exclude private generation instructions and editing credentials.

Browser storage

An HttpOnly cookie grants editing access for 180 days. Browser setup refreshes it. JavaScript cannot read the cookie.

An unresolved request temporarily uses sessionStorage in the active tab. It includes personal fields and custom text so you can recover after a reload.

The application clears this record after confirmed success, a terminal failure, or your explicit decision to start another attempt.

Closing the tab loses this recovery record. Clearing the ownership cookie permanently removes editing access. Signing in does not restore card editing access.

AI provider

Creation sends personal details and your message to OpenAI for moderation. Artwork refinements send personal details and artwork instructions for moderation. OpenAI also checks generated images before saving. Artwork generation uses OpenAI by default or Google when Gemini is enabled. Your message is excluded from artwork-generation prompts.

Provider retention follows your deployment’s OpenAI and Google account settings and terms. Authored demo mode sends no data to either provider.

Direct message edits send your text to OpenAI for moderation before saving it unchanged.

Who processes your data

We use these providers to run Sendable Cards:

Occasion reminders

What we collect. If you ask for reminders, we store your email address, the occasions you add (for birthdays and anniversaries, the name or nickname and the month you type; a first name or nickname is enough), and a record of your consent: which wording you agreed to, where, and when you confirmed it. We do not store a day, year, or time zone. We never read the date from a card.

When we email you. Once a year for each occasion, on the first of that month.

Legal basis. Your consent. You can withdraw it at any time with the unsubscribe link in any reminder, on the manage page, or by writing to privacy@sendable.cards.

Confirmation. We email you a link to confirm. Nothing is sent until you confirm.

Who sends the email. We use Loops (loops.so) to send confirmation and reminder emails. Loops receives your email address, an internal ID we use to match you to our records, the version and date of the consent you confirmed, whether and how you signed up for reminders, and which reminder list you're on. Each time a reminder goes out, Loops also receives that one occasion: the name or nickname you entered and the occasion and its month. Loops receives the confirmation link and the links in each reminder, and stores the emails it sends, including those links. Your full list of occasions and the rest of your consent record stay in our own database. Loops doesn't receive your cards or anything you wrote in them.

Unsubscribing. Every reminder has an unsubscribe link and a link to manage your reminders, where you can turn off one occasion or all of them. If you unsubscribe through Loops, we stop scheduling reminders for you.

Retention. If you unsubscribe from all reminders or ask us to delete your data, we delete your occasions and your subscriber record right away, stop any reminder that was about to go out, and ask Loops to delete your contact. Turning off one reminder deletes that occasion. If you don't confirm a sign-up within 30 days, we delete it. We keep the record of your consent for 3 years after you withdraw it. We keep a one-way hash of your email address so we never email you again after you opt out. We treat it as personal data and use it only for that. If you sign up again later and confirm, we remove that hash, unless your address bounced or you reported our email as spam.

Age. Reminders are for people 18 and older.

DECIDE (Matthew): Age: keep the 18+ draft above, or switch to "13 or older, with a parent or guardian's permission if you're under 18" (needs a parent-permission flow). Nothing in the app checks age today. Lex recommends 18+ because OpenAI's terms bar under-18s without parental consent.

Accounts. Signing in only fills in your email on the reminder form. We don't send account data to Loops.

Email from the earlier site

If you gave us your email on the earlier Sendable Cards site for updates or card ideas, we've added you to holiday card reminders (Valentine's Day, Mother's Day and Father's Day). Every email has an unsubscribe link, and unsubscribing stops them right away. We don't use anything else from your earlier sign-up.

Other services

Optional accounts use Clerk for sign-in and profile management. Clerk processes the account details you provide and uses authentication cookies. Signing in does not connect your account to card ownership.

We use Vercel Web Analytics to measure page visits and a few product events: when a card is created (and its category), when a share link is copied, and when a card is opened. It doesn't use cookies, and these events don't include your name, email address or anything you wrote.

Apart from the occasion reminders you choose, this version has no newsletter, feedback collection, advertising, or third-party trackers. We never sell your data.

Questions or requests about your data: privacy@sendable.cards. Do not include sensitive information in a card.

Contact

Privacy requests: privacy@sendable.cards.

DECIDE (Matthew): Postal address for CAN-SPAM email footers (set in Loops). Neither the street address nor who monitors privacy@ and legal@ has been decided.