Privacy

Last updated: 2026-09-22

What we collect

• Your email - used only to sign you in (one-time OTP code) and to send you notifications about your gestures. We do not send marketing email.
• Gesture content - the photos, captions, letters, and prompts you author. These are stored in our database and (for photos) in our object storage so that the person you sent the gesture to can view it.
• View counts- when a recipient opens a gesture you made, we record the count and the time it was opened so you can see whether they've seen it.
• Aggregate traffic stats- we use Vercel Analytics and Google Analytics to see how many people visit, which pages they land on, and which site referred them. Google Analytics sets a cookie in your browser for this. We use it only to understand traffic in aggregate - never to build an advertising profile of you, and we don't send it your gesture content.

What we don't collect

• No advertising cookies, and we don't sell or share your data with advertisers.
• No tracking pixels in the emails we send you.
• No information about the people you send gestures to (no name, no email, no IP logging beyond what our infrastructure providers do for security).

Where it lives

Data is stored with our infrastructure providers: Supabase (database, auth, and photo storage), Resend (transactional email), Vercel (hosting and analytics), and Google (analytics). Each has its own privacy policy.

How long we keep it

• Drafts auto-purge 30 days after they were last edited.
• Photos in published gestures auto-archive 90 days after the recipient finishes viewing the gesture - the gesture itself stays, but the photo files are removed to keep this free for everyone.
• Everything else stays until you delete it or delete your account.

Deleting your data

You can delete any gesture you made from your dashboard. To delete your account and everything tied to it, email hello@email.cute-gestures.com.

Contact

Questions: hello@email.cute-gestures.com.