Privacy Policy
Last updated October 2026
What information we collect
When you create an account, we collect your name and email address, along with your timezone so we can schedule card delivery correctly. When you create or contribute to a card, we collect the card's title, occasion, recipient name and email, and the messages, photos, and GIFs added to it. If you sign a card and ask for a copy of the finished card, we collect your email address and use it only to send you that card once it's delivered; we don't add it to any mailing list or email you about anything else. If you upgrade a card to premium, we record that a payment was made and its status, but we don't collect or store your card or bank details ourselves, that's handled directly by our payment provider.
How we collect it
Most information comes directly from you: signing up, creating a card, or writing a message. If you sign in with Google, we receive your name and email from your Google account. If you upgrade to premium, our payment provider confirms the payment back to us so we can unlock the relevant features on your card.
How we use it
We use your information to run the service: creating and displaying cards, delivering them to recipients, sending sign-in codes and delivery notifications, processing premium upgrades, and responding when you contact us. We don't use your information for advertising, and we don't sell it to anyone.
Feedback and testimonials
After a card is delivered, its creator can leave optional feedback. We keep it with that card and read all of it. It's private unless you tick “You may publish my feedback and display name as a testimonial”, and even then we review it before anything appears. A published testimonial shows only your comment, the display name you chose and the occasion, never your email, the recipient, card links or messages. You can withdraw permission at any time from the card's page, and it comes down straight away.
Who we share it with
We share information with the service providers that help us run Signed Together: our database and file storage provider, our email provider (for sign-in codes and notifications), our payment provider (for premium upgrades), Giphy (when you search for and add a GIF to a message), and analytics providers Google Analytics and PostHog (to understand how visitors use the site, with your consent where the law requires it, and to catch errors). These providers only receive what they need to do their job, and don't get to use your data for their own purposes. We also share card content the way the product is designed to work: a card's messages are visible to its recipient and to other contributors on that same card, that's the whole point of a group card. We don't share your information with anyone else except where required by law.
Managing your information
You can update your name and timezone from your account settings at any time. If you'd like us to delete your account or the personal information we hold about you, please contact us and we'll action your request, subject to anything we're required to keep for legal or accounting reasons.
Where information is stored
Your information is stored and processed on servers operated by our hosting and infrastructure providers, which may be located outside your own country.
Data security and retention
We take reasonable technical and organizational measures to protect your information, but no method of storage or transmission over the internet is completely secure. We retain your information for as long as your account and cards are active, or as needed to comply with our legal obligations.
Children's privacy
Signed Together isn't directed at children, and we don't knowingly collect information from anyone under 13. If you believe a child has provided us with personal information, please contact us and we'll delete it.
Changes to this policy
We may update this privacy policy from time to time. Continued use of Signed Together after a change means you accept the updated policy.