Privacy policy

Surprise cards often carry personal news — a pregnancy, an engagement, a gift. This policy explains what we collect, why, and how we keep it private. Surprisescratchies is run from the United Kingdom and follows UK data protection law (UK GDPR).

What we collect

• Card details: your name, the recipient's name, the occasion, the reveal wording and any extras you add (personal message, photo, voice note, memory book or quiz).
• Email addresses: your email, so we can tell you when your card is revealed, and the recipient's email only if you choose to share by email.
• Payments: paid extras are processed by Stripe. We never see or store your card number.
• Account details: if you choose to sign in, your email address (or Google account email) so we can show you your cards.
• Usage information: anonymous page visits and button taps that help us improve the site.

How we use it

• To create your card and show it only to people with its private link.
• To email you when your recipient reveals the surprise.
• To take payment for extras you choose.

We do not sell your information or use your card contents for advertising.

Keeping cards private

• Each card can only be opened with its secret link. Photos and voice notes are kept in private storage and shown through short-lived links.
• The hidden surprise is not shown until the recipient scratches or chooses to reveal it.
• Unfinished cards are saved only on your own device. You can clear them at any time — useful on a shared device.

Who we share it with

Only the services needed to run the site: our hosting and database provider, our email delivery provider, Stripe for payments and Google if you sign in with Google. Each processes data only on our behalf.

Partner and Amazon links

After a reveal we show links to gift shops. As an Amazon Associate I earn from qualifying purchases, and we may earn a commission from other partner links at no extra cost to you. Those shops have their own privacy policies.

Your rights

Surprisescratchies is run by Adam Lester, who is responsible for your data. Email adsterlester@gmail.com to see, correct or delete your information, or object to how we use it. You can also complain to the Information Commissioner's Office (ico.org.uk).

Children

Surprisescratchies is intended for people aged 18 and over to create cards.

Changes

If we change this policy we'll update the date at the top of this page.