Privacy notice · 26 September 2026

Your words, and where they go

Drafts and pictures

Unpublished drafts are kept in this browser using IndexedDB, for up to 10 drafts and 30 days without editing. Exporting a PNG is performed on your device and does not publish your message. Clearing browser data can erase drafts and editing keys.

Published gifts

Creating or updating a gift sends its flower arrangement and message to the service, where it is stored in Cloud Firestore. Anyone with the recipient link can open it. Gifts are not password protected or end-to-end encrypted. Avoid including sensitive information.

Links expire 365 days after creation. Updating does not extend this date. Revoking a gift clears its content and prevents new reads; a status record remains for cleanup after 30 days. Expired gifts are blocked before background database cleanup completes. Previously saved images and chat previews cannot be recalled.

Editing access

A separate private key authorizes changes and revocation. The server stores a keyed digest, not the readable key. Your browser keeps the key for its session when possible; persistent storage requires your explicit Remember choice. Never share the private editing link.

Essential storage and abuse prevention

A signed first-party browser cookie supports publishing limits. Requests may be processed by our hosting, DNS and database providers. The application uses limited, keyed rate-limit records to control abuse; it does not include your message in analytics events. Provider logging and retention are reviewed before public launch.

Optional statistics

Optional statistics are currently disabled. The Privacy choices control lets you allow or reject them. If enabled after release review, Firebase Analytics is limited to approved public and new-editor pages after consent. Personal gift, sharing and management pages do not load it.

Sharing measurements use separate daily totals without gift IDs, message text or editing keys, with a 90-day reporting window. A copied link or share-panel return is not proof of delivery or reading. Your choice is saved locally for up to 180 days. Refusing does not prevent creating, saving or sharing.

Manage your gifts and local data

Use your private editing link to revoke gifts you created. Delete drafts from your flower studio, or clear this site’s browser data to remove local drafts and editing keys. Clearing local data does not revoke published gifts. See Gift help for recovery and saving instructions.