Privacy, in plain English

We store the card. That means the recipient's name, the occasion, the organizer's first name, the headline, and every message and signature people add. That is what a card is, so we cannot really do without it.

We do not run adverts, we do not use advertising trackers, we do not sell or share your details with anyone for marketing, and we do not send newsletters. There is no account, so there is no profile of you sitting anywhere.

The recipient's name, the occasion you pick, your first name as organizer, and any custom headline you type. We also generate two random links: a public signing link and a private organizer link.

Your browser keeps a copy of your organizer links on your own device so you can find your cards again. That is stored locally, in your browser, not on our servers. Clearing your browser data removes it.

The message you write, the name you sign it with, and the color you pick. If you add a video, we store the clip and a still frame from it in private storage that only the card can reach. Your browser remembers the name you used so you do not have to type it next time, and keeps a private key for each note you write so you can always see your own words before the card is unlocked. Both of those live on your device only.

Please only write things you are happy for everyone with the link to read once the card is unlocked. Group cards are, by design, a group thing.

Payments are handled by Stripe, a regulated payment provider. Your card number goes straight to Stripe and never touches our servers. Stripe sends us back a payment reference and confirmation that the card (or a video note) has been paid for, which we store against the card so it stays unlocked.

Stripe may also take your email address for the receipt. Their own privacy notice covers what they do with it, and you can read it at stripe.com/gb/privacy.

Anyone who has the signing link can add a message and see who else has signed. Until the card is unlocked, that is all they see: the names, not the words or videos, which are held back on our servers. Once someone pays to unlock the card, everyone with the link can read every message. Links are long, random and not listed anywhere, and we ask search engines not to index them. Treat a signing link like an invite to a private group chat: share it with the people who should be in it.

Anyone with the private organizer link can remove messages, change the headline, seal the card and reopen it. Only the organizer gets that link. Keep it to yourself unless you want a co-organizer. The organizer link does not skip the unlock: the words stay hidden there too until the card is paid for.

Once a card is unlocked and sealed, the recipient sees it through the reveal link. That shows the same messages as the signing page.

Like every website, our hosting keeps short-lived server logs with things like IP addresses, the pages requested and the time. We use them to keep the service running and to spot abuse. We do not use them to build profiles.

We use a small amount of local browser storage for the things mentioned above. We do not set advertising or analytics cookies.

Cards stay up so the recipient can go back to them. Organizers can remove individual messages at any time from the organizer page.

If you want a whole card deleted, or your message removed from someone else's card, email hello@passitround.com with the card link and we will sort it. If we ever changed how long cards are kept, we would give plenty of notice and a way to download everything first.

Under US privacy laws, including the CCPA in California, you can ask what we hold about you, ask for it to be corrected, or ask for it to be deleted. Because there are no accounts, the quickest way to help is to send the card link along with your request to hello@passitround.com. We aim to reply within a few days, not a few weeks.

If you are not happy with how we have handled something, California residents can also raise it with the California Privacy Protection Agency, and everyone else can contact their state attorney general.

Pass It Round is aimed at adults organizing cards for colleagues, friends and family. If you think a child's details have ended up on a card without a parent or guardian's say-so, get in touch and we will take them down.

If we change how we handle your information we will update this page and change the date at the top. Anything significant gets a plain-English note on the home page as well.

Pass It Round is a small US-based service. For anything privacy related, email hello@passitround.com. For everything else, the help page is a good place to start.