Privacy Policy

This Privacy Policy explains what information Forever Love Lab collects when you use foreverlovelab.com, our blog, the gift editor, and the gift pages we host, including links on foreverlove.page (the "Service"), how we use it, and the choices you have. See our Terms of Use too.

Forever Love Lab is run by Rohan Bhatia, an individual based in India ("we", "us"), who is responsible for your information under this policy.

Information we collect

From your Google account. When you sign in with Google, we receive your name, email address and profile picture. We never see your Google password.

Content you create. The gifts you make: text, photos, videos, audio, and settings like themes, custom links and passwords (stored only in hashed form).

Drafts on your device. If you start a gift without signing in, your draft is saved in your browser's local storage. It stays on your device until you sign in and save it to your account. Photos, videos and audio you add before signing in are uploaded to our storage right away so the editor can show them. If you don't sign in and save the draft, we delete those files within 2 days.

Emails you send through us. When you share a gift by email, we use the addresses you enter only to send that one email. We don't store them. We only keep a count of how many emails you've sent, to prevent abuse. Our email provider, Resend, keeps a delivery log (including the recipient's address) for a limited time. The email shows the recipients your name and any message you write, and replies go to your email address.

Reports. If you report a gift, we receive the gift's link, the reason, the details you write and your email address, by email. We use them only to handle the report and reply to you, and we keep that email for as long as we need it to resolve the report and to show how we handled it if asked. We don't share your email with the gift's owner. We email you a confirmation, so our email provider's delivery log includes your address for a limited time. Sentry also receives a note that a report was made, with only the reason and the gift's link.

Technical information. Like most websites, our servers and hosting providers log basic request data (IP address, browser type, pages requested and timestamps) to keep the Service secure and working. When you sign in, we store your IP address and browser type with your sign-in session, which lasts up to 7 days.

Usage and advertising measurement. On our website, blog and editor we use Google Analytics to understand how people find and use the Service, and to measure our Google Ads:

• If you accept cookies, Google Analytics uses cookies to recognize your visits, and Google Ads can tell when one of our ads led you to sign up.
• If you decline (or haven't chosen yet), no cookies are set. Google Analytics still receives basic information about each page you view (the page, your browser and device type, and an approximate location derived from your IP address), which it uses to estimate overall traffic. If you're signed in, this includes a random ID for your account (never your name or email).
• Either way, when you sign up, create a gift or publish one for the first time, our server tells Google Analytics that it happened, linked to that random account ID, so we can see how many people complete each step. It isn't used for advertising unless you accepted cookies.

Gift pages. Gift pages load no analytics and set no analytics cookies. Our server only tells Google Analytics that a gift page was viewed, with nothing about which gift was viewed or who viewed it.

Error reports. When something breaks, on any page including gift pages, Sentry receives a technical report (what failed, the page, and the browser and device type) so we can fix it. It sets no cookies and isn't used to identify you.

Fonts and embedded content. Some gift themes load their fonts from Google Fonts, so your browser requests them from Google, which receives your IP address. Blog posts load their images from Sanity, and a post with a video loads it from YouTube (in its privacy-enhanced mode) or Vimeo, which receive your IP address and may set their own cookies when you play the video.

How we use it

• to create and run your account;
• to store, display and share the gifts you make, with the people you choose;
• to send you emails about your account and your gifts (a welcome email, and a note when a gift first goes live), and to send the gift emails you ask us to;
• to provide premium features you have access to;
• to keep the Service secure and prevent abuse, including handling reports about gifts;
• to fix bugs and improve the Service;
• to understand how people find and use the Service, and how well our ads work;
• to contact you about your account or important changes.

We don't sell your personal information, and we don't use your content to show you ads.

Our legal bases

Where laws like the GDPR apply, we rely on: performing our agreement with you (running your account and gifts); your consent (analytics and advertising cookies, which you can withdraw at any time); and our legitimate interests (keeping the Service secure, fixing errors, and measuring how the Service is used without cookies). You can object to that measurement at any time by emailing us.

Who can see your gifts

A published gift is visible to anyone with its link. If you add a password, only people with the password can open it. If a gift is reported, we may look at it, including a password-protected one, to handle the report. Link previews (the title and image shown when you paste a link into a chat app) are visible to anyone the link is shared with.

Service providers

We use trusted providers to run the Service, and they only process your information on our behalf:

• Google: sign-in, Google Analytics, Google Ads and Google Fonts;
• Resend: sending our emails;
• Sentry: error reports, and a note when a gift is reported;
• Cloudflare: protecting and delivering the website, and storing videos and audio;
• Cloudinary: storing and delivering images;
• Sanity: our blog's content and images;
• YouTube and Vimeo: videos embedded in blog posts;
• Turso: our database;
• our hosting provider: running the website itself.

These providers may store data in countries other than yours, with appropriate safeguards in place.

Cookies

We use a small number of essential cookies, which the Service needs to work:

• one to keep you signed in (for up to 7 days);
• one to remember that you've unlocked a password-protected gift (for 7 days);
• one to remember your cookie choice (kept for 6 months).

Google Analytics and Google Ads cookies (such as _ga) are set only if you click Accept on our cookie banner, and last up to 2 years. You can change your mind at any time from Cookie settings at the bottom of our website and blog. Gift pages never show the banner and never set these cookies.

How long we keep it

We keep your account and content for as long as your account is active. When you delete a gift, it's removed from the Service right away, together with the photos, videos and audio you uploaded to it that none of your other gifts use. When you delete your account from your account settings, we delete it and all your gifts and uploads right away, apart from copies kept in routine backups for a limited time or anything we must keep by law. If you email us instead, we do the same within 30 days. Google Analytics data is kept for up to 14 months, error reports for up to 90 days, and our email provider keeps delivery logs for a limited time.

Your choices and rights

You can view, edit and delete your gifts and your account at any time, and change your cookie choice from Cookie settings. You can also ask us to access, correct, export or delete your personal information, to delete your account, or to stop measuring your activity. Depending on where you live, you may have further rights under laws such as the GDPR or CCPA. Just email us and we'll help.

Children

The Service is for adults. It isn't meant for anyone under 18, and we don't knowingly collect their personal information. If you think someone under 18 has given us information, contact us and we'll delete it.

Changes to this policy

We may update this policy from time to time. We'll change the "Last updated" date above, and for significant changes we'll let you know through the Service or by email.

Contact

Questions or requests about your privacy? Email us at [email protected].