Privacy & Terms

Dear You is a free tool I built as a personal project — a small space to send something more intentional than a DM.

By using Dear You, you agree to use it kindly and responsibly. I reserve the right to remove content or suspend access if these terms are violated.

Your content

You own everything you create on Dear You — your messages, your drawings, your images. They're yours.

By using the service, you grant Dear You a limited license to store and display your content solely to make the service work for you and the people you send cards to. Nothing more.

Acceptable use

Please don't use Dear You to upload harmful, abusive, or illegal content, to harass or threaten anyone, or to attempt to access cards that weren't shared with you.

No guarantees

Dear You is a tiny indie project. I do my best to keep it running, but I can't promise zero bugs, uninterrupted access, or permanent storage. Please keep your own copies of anything important to you.

I'm not liable for any loss or damage from using the service — but I'll always try to fix issues quickly.

Modifications

I may update these terms from time to time. Continued use of the service means you accept the latest version.

What I collect

• The content of your cards (message, image) — stored so your card can be shared via its unique link.
• Basic analytics data (pages visited, visit count, bounce rate) — used only to understand how people use Dear You. Collected via Vercel Analytics and Google Analytics.
• Technical data (IP address, browser type) — collected automatically by the hosting infrastructure to keep the service running.

What I don't collect

• No account or login required.
• No personal profile.
• No selling of data.
• No targeted ads.
• No tracking across other websites.

Cookies & consent

Dear You uses analytics cookies (Vercel Analytics, Google Analytics). You can accept or refuse them via the banner shown on your first visit.

Only essential cookies are used without your consent.

How long is your data kept?

Card content and images are stored indefinitely as long as the link is active. If you'd like your card deleted, reach out and I'll take care of it.

Analytics data is kept for up to 14 months (Google) and 26 months (Vercel).

Your rights (GDPR)

If you're based in the EU, you have the right to access, correct, export, or delete your data at any time. Just get in touch via the feedback form.

You can also file a complaint with the French data protection authority: cnil.fr

Hosting & infrastructure

• Vercel (hosting) — USA, EU-US Data Privacy Framework certified
• Supabase (database) — EU region, Frankfurt
• Google Analytics — may involve data transfers outside the EU