Privacy Policy

Who we are

Someone's at the door is made by [publisher name] in Sweden ("we", "us"). We are responsible for the personal data described here. You can reach us at [contact email].

Your message

Your cue cards, names and end words travel inside the link. Before anything is saved, your phone encrypts them, and the key that unlocks them is the part of the link after the #, which is never sent to a server.

• Short links (…/m/abc123#…): we store the encrypted message, the occasion (Christmas, Birthday or Love, so the chat preview matches) and when the link was made and sent. Without the key we can't read it. Your draft is saved this way (encrypted) while you write, so your link is ready the moment you tap Copy link.
• Long links (if short links are ever unavailable): nothing is stored at all.

Anyone who has the link can open the message, so send it only to the person it's for.

"Tell me when it's opened" 👀

Only if you tick the box. The person you send it to sees "you will see when you open this" before they open the door. Besides when the link was made, we save just two times: when the door was first opened, and when the message was watched to the end. Nothing about them: no device, no location, no IP address, never the cards. Opening your own link doesn't count.

On your phone

Your unfinished cards, the Your links list, whether you've seen the app's introduction and how many links you've sent from the app (just a number, so it can ask for a rating at a good moment) are kept on your device only. We never receive them. To show whether a link was opened, your phone asks us about that link's random receipt id, and nothing else. Tap ✕ to forget a link. Deleting the app (or clearing the website's data) removes everything.

The example message (website only)

The example on the website's home page (never your messages) counts how long each card is looked at, so we can make it better. For that we save a random visit id, which card and for how long, the screen size, a rough device type (like "iPhone") and the country. Not your city, IP address or full browser details. The app doesn't do this.

Who helps us

• Vercel hosts the website and the small server the app talks to. Like every web host, it sees your IP address to deliver the page and may keep it briefly in its logs. We don't store it.
• Supabase is our database for short links, receipts and the example's stats. Only our server can use it.

They only process data on our behalf, under data processing agreements. Some of their servers may be outside the EU/EEA, such as in the United States; transfers are covered by the EU's Standard Contractual Clauses or the EU–US Data Privacy Framework. The fonts, pictures and music are part of the website and the app. There are no analytics, advertising or social media tools.

Why we may use the data

• Short links: to deliver the message you asked us to send (performing our service for you).
• "Tell me when it's opened": because you turned it on, and our and your legitimate interest in letting you know your message arrived. The person who opens it is told first.
• The example's stats: our legitimate interest in improving the example, using as little data as possible.

How long we keep it

Drafts that were never sent or copied are deleted after a day. Short links that were sent, and their receipts, are kept so the link keeps working. There are no accounts, so we can't tell which links are yours. If you want a short link deleted, send it to us and we'll delete the message and its receipt.

Your rights

Under the GDPR you can ask to see, correct or delete personal data about you, ask us to limit how we use it, or object to it. Because we don't know who you are, we usually need the link to find it. Write to us and we'll answer within a month. You can also complain to the Swedish Authority for Privacy Protection (IMY) or the data protection authority where you live.

Children

Someone's at the door is for a general audience. We don't knowingly collect personal information from anyone, children included, and the app has no accounts, ads or tracking.

Changes to this policy

If we change what we collect, we'll update this page and the date below before it happens. Big changes will also be shown in the app.

Questions

Write to [contact email]. We read everything.