Draft: this page will be reviewed before launch
Privacy policy
Last updated 19 October 2026
This page explains what OpenMe collects, what we use it for and how long we keep it.
What we collect
- Your email (required when paying) and WhatsApp number (optional).
- What you put in the card: recipient name, age, birthday, messages, photos and music.
- Payment status from our payment provider. We never receive your bank account or card details.
- The IP address of people entering a card passcode, stored only as a one-way hash, to stop passcode guessing.
How we use it
- To create the card and show it to the recipient.
- To send you the card link, edit link, receipt and expiry reminders.
- To stop passcode guessing and to help you when you contact us.
Who can see your card
- Only people who have the link (and the passcode, if you set one). Cards are not listed anywhere, and we ask search engines not to index them.
- Location data (EXIF, including GPS) is removed from uploaded photos before they are shown.
How long we keep it
- Unpaid cards: deleted after 30 days without edits.
- Photos and music of expired cards: deleted 30 days after expiry.
- Passcode attempts: 30 days.
- Order and payment records: as long as accounting law requires.
Who we share it with
- Our payment, email and file storage providers, only as needed to run the service. We do not sell your data.
Your rights
- You can ask us to delete a card and its files at any time at support@getopenme.com. We keep only the order records the law requires.