PRIVACY POLICY
How your checkout information and digital surprise are handled.
WHAT WE KEEP.
Order & delivery details
Your checkout email, order and payment references, assigned surprise, and delivery status.
Personalization
Your first name can appear in your surprise.
Opening records, when tracking is enabled
We record the first opening of a confirmed surprise and daily claims. The shop shows aggregate mysteries-opened and gifts-sent counts, without your name, email or private link. These count boxes and accepted gift emails, not unique people or confirmed inbox delivery.
Gift details, when gifting is enabled
We keep the friend’s name and email, sender’s name and checkout email, optional message, chosen delivery time, and whether the gift has been opened. We send one reminder if it remains unopened for 30 days after the first email. The sender’s confirmation page can show that it was opened, but does not show the surprise or recipient’s private link.
WHY WE KEEP IT.
Purchase & delivery
To verify your purchase, deliver your surprise, and let you reopen it.
Abuse prevention & retention
A hashed network address helps limit repeated checkout requests. Order and delivery records do not currently expire automatically.
Daily boxes and browser collections
A signed, essential browser cookie identifies your daily allowance for up to a year. Server records hold keyed hashes of that identifier and network address, daily claim dates and assigned surprises. Clearing cookies does not reset the network allowance. Collections are stored in your browser with hashed opening identifiers, never private gift or reveal links. Clearing browser data removes the local collection. Exported backups and saved images may contain personalized surprise text; share them carefully.
WHO HELPS.
Payments
Dodo Payments collects payment and billing details. We do not store full card numbers. Dodo explains its handling of payment data in its Privacy Policy.
Storage & email
Neon stores app records and reward files; Google SMTP sends reward emails.
YOUR PRIVATE LINK.
Access to your surprise
Anyone with your reveal link can access your surprise. Keep it private.
QUESTIONS?
Contact the shop
For support or requests about your data, email support@buyarandomthing.xyz.