Legal

Privacy Policy

Last updated 30 October 2026. This explains what FromMe2You collects when you use fromme2you.net, why, where it is kept, and the choices you have.

To confirm before relying on this policy: the operator’s legal name, whether EU/UK visitors need a cookie consent banner for Google Analytics and Microsoft Clarity, the minimum age, and the deletion turnaround time. A lawyer should review the final text.

Who we are

FromMe2You is run by the individual who runs FromMe2You, based in Nepal. For anything about your data, write to support@fromme2you.net.

What we collect, and why

Your account

You sign in with Google through Firebase Authentication (by Google). We receive your name, email address and profile photo, and use them only to run your account: to show your name and photo in the app and to send reminder emails if you turn them on.

What you make and save

  • Your profile settings: display name, email, time zone and reminder preferences.
  • People and important dates you save: names, relationship, notes and dates such as birthdays.
  • Gifts: drafts and sent gifts, including the words you write, who they’re for and the template you chose.
  • Photos you add to a story. Each photo is resized on your device and uploaded to your photo library. We keep a fingerprint (a hash) of each photo so the same photo isn’t stored twice.

This is stored in Google Cloud Firestore (region asia-south1, Mumbai) and, for photos, Cloudflare R2. Only your account can read your drafts, people and dates.

Sent gifts and their links

When you send a story, a copy of its words and photo links is published so it can open from its link. Anyone who has the link can open the gift and see its words and photos. Links are long and random, so they can’t be guessed, and gift pages ask search engines not to list them. Share a link only with the person it’s for.

Free cards

Free cards are made entirely on your device. Their photos and words are never uploaded to us.

On your device

Your browser’s local storage keeps a copy of drafts you’re writing, so nothing is lost if the connection drops. If you try a story before signing in, its draft and photos stay only there until you sign in to create its link; a free card you start before signing in is kept in this browser tab while you sign in to download it. Google sign-in keeps your session in your browser’s storage (including IndexedDB).

How the site is used

When enabled, we use Google Analytics (through Firebase) and Microsoft Clarity to understand how people use the site and to find problems. Clarity records anonymous sessions (clicks, scrolling and page layout). On your account pages, the editor and gift pages, the text and images are masked so Clarity does not capture what you write or your photos. The events we send carry IDs such as the template chosen, never gift text, names, email addresses or photo links. These services may set cookies.

Reminder emails

Once reminder emails are available and you turn them on in your profile, we email you before a saved date, using Cloudflare Email. You can turn them off at any time.

Other services that see requests

  • Cloudflare hosts the site and its API, so it processes every request (including your IP address) and keeps short-lived logs.
  • Google Fonts serves some fonts used by the story templates and free cards.
  • Sanity holds our own content (such as template descriptions). We don’t send it your data.
  • The “Featured on” badges in our footer load from each directory’s own website, which can see that your browser requested them.

We don’t sell your data or use it for advertising.

Limits and how long we keep things

Each account can send up to 50 gifts and keep up to 300 photos of up to 5 MB each. We keep your account and what you make until you delete it.

Deleting your data

  • A gift: delete any draft or sent gift from My gifts. Deleting a sent gift stops its link working and removes photos that no other gift of yours uses.
  • People and dates: remove them in the app at any time.
  • Your whole account: email support@fromme2you.net from your account’s address and we’ll delete your account and everything in it.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, or object to how we use it, by writing to support@fromme2you.net. Depending on where you live, you may also be able to complain to your data protection authority.

Children

FromMe2You is not meant for young children. If you believe a child has given us data, write to us and we’ll delete it.

Changes

If this policy changes, we’ll update the date at the top. See also our Terms & Conditions.