Privacy Policy

1. Information we collect

We only collect information that we need to provide the Service:

• Account information: your name, email address, password (stored in an encrypted, hashed form), and your date of birth.
• Content you create: birthday messages, guesses, quiz results, and any text submitted by you or by people using your shared link.
• Technical information: basic usage data such as browser type, device information, and pages visited, collected through analytics.

2. How we use your data

We use your information to:

• Create and manage your account.
• Let you collect messages and play the birthday quiz.
• Send you essential service-related communications.
• Maintain, secure, and improve the Service.

We do not sell your personal data to third parties, ever.

3. Legal basis for processing

We process your personal data where it is necessary to perform our contract with you (providing the Service), where you have given consent, where we have a legitimate interest in operating and improving the Service, and where we are required to comply with a legal obligation. You may withdraw consent at any time.

4. How we store and protect data

We take the security of your data seriously. Your information is stored on secured servers, and we apply reasonable technical and organisational measures to protect it against unauthorised access, loss, or misuse, including:

• Encryption of data in transit using HTTPS/TLS.
• Passwords stored using one-way cryptographic hashing — never in plain text.
• Restricted, role-based access to personal data.
• Regular review of our security practices.

5. Sharing your information

We only share your data with trusted service providers (such as hosting and analytics partners) who help us run the Service and are bound to protect your data, or where required by law. We never sell or rent your personal information.

6. Data retention

We keep your personal data only for as long as your account is active or as needed to provide the Service. If you delete your account or request deletion, we will remove your personal data, except where we are legally required to retain certain records.

7. Your rights & data deletion

Subject to applicable law, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete information.
• Delete your personal data ("right to be forgotten").
• Restrict or object to certain processing of your data.
• Withdraw consent where processing is based on consent.
• Export a copy of your data in a portable format.

8. Cookies & analytics

We use a small amount of browser storage to keep you signed in, and we use analytics to understand how the Service is used so we can improve it. You can control cookies through your browser settings; disabling them may affect some features of the Service.

9. Children's privacy

The Service is not directed at children under 13 (or the minimum age required in your country). We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, notify you. Your continued use of the Service after changes take effect means you accept the updated policy.

11. Contact us

If you have any questions about this Privacy Policy or how we handle your data, please reach out at opeonikute.dev@gmail.com.