Privacy policy
Last updated August 2026
Draft — needs review by a lawyer before launch. This describes what the software actually does, which is the useful starting point, but it is not legal advice and has not been reviewed against CCPA, state privacy laws, or the requirements that apply to holding data about people who are not your customers.
The short version
We collect what we need to mail a birthday card and nothing else. We do not sell personal information. Your recipients never receive email or marketing from us — they receive a card, once a year, from you.
What we collect about you
- Your name and email address.
- Your password, stored only as a bcrypt hash. We cannot read it.
- Billing details, held by Stripe. Card numbers never touch our servers.
- Basic security logs: IP address and timestamps of sign-in attempts.
What we collect about the people on your list
This is the part that deserves care, because these people did not sign up for anything. For each person you add we hold their name, mailing address, birth month and day, an optional birth year, the card style you chose, and any message you wrote.
We use it for exactly one thing: buying, writing and addressing their card. We do not contact them, profile them, enrich the record from other sources, or share it with anyone beyond the postal service on the front of the envelope.
How it is stored
Street address lines are encrypted at rest using AES-256-GCM. City, state and postal code are stored readable so we can sort and plan postage — on their own they do not identify a household. Passwords are hashed. The connection to this site is encrypted with TLS.
Who we share it with
We use a small number of service providers, and only for the job named:
- Stripe — payment processing and subscription billing.
- Our web host — running this site and its database.
- Our email provider — sending reminders and confirmations to you.
We do not sell personal information, and we do not share it for cross-context behavioral advertising.
How long we keep it
Recipient records last as long as they are on your list. Delete someone and their address is deleted with them. Close your account and the whole list goes, along with your details. We keep a minimal record of completed transactions where tax and accounting rules require it.
Your choices
- Edit or delete anyone on your list, at any time, from your account.
- Turn reminder emails off in account settings. Service emails about cards we are mailing for you will still be sent.
- Close your account, which deletes your list.
- Ask us for a copy of what we hold about you, or ask us to delete it.
If someone on your list contacts us
If a recipient asks us to remove their details, we will do it and let you know we have, so you are not left wondering why a card stopped arriving. We do not need their permission to mail them a card from you, but we will honor a request to stop.
Children
This service is for adults. You may add a child to your list — plenty of people mail cards to nieces and nephews — but the account holder must be 18 or older.
Cookies
One session cookie, so you stay signed in. No advertising or analytics trackers.
Contact
Questions about any of this go to hello@annualwishes.com.