Privacy Policy | theBouquet

1. Information We Collect

theBouquet does not require an account to use. We collect the following information:

Bouquet Data: The bouquets you create, including images, messages, recipient names, and sender names.
Usage Data: We use Google Analytics and Google Tag Manager to collect anonymous usage statistics to improve our service.
Email Addresses: If you choose to send a bouquet via email, the recipient's email address is used solely to deliver the notification and is not stored. If you donate via Ko-fi, your email address is received via webhook and used solely to deliver your supporter unlock link. It is stored as part of your supporter record — see Section 6 for retention details.
Spam Protection Data: We use reCAPTCHA to protect the service from automated abuse. This may collect behavioral signals and device information as part of Google's spam detection. See Google's Privacy Policy for details.
Supporter Data: If you support theBouquet via Ko-fi, we store a unique token, Ko-fi email, and transaction ID to verify your supporter status. A token is also saved in your browser's localStorage to remember your status.

2. How We Use Your Information

To provide the bouquet creation and sharing service.
To display your public bouquets in the Showcase gallery and use them for marketing or promotional purposes (only if you opt in).
To send bouquet notification emails to recipients you specify.
To protect the service from spam and automated abuse.
To improve the performance and reliability of our site.

3. Third-Party Services

We use the following third-party services:

Cloudinary: To store and serve bouquet images.
Google Analytics & Tag Manager: To collect anonymous usage statistics.
Google reCAPTCHA: To protect the service from spam and automated abuse.
Vercel: For hosting and deployment.
Brevo: To deliver bouquet notification emails to recipients you specify, and to send supporter unlock links to donors.
Ko-fi: To process supporter donations and deliver unlock tokens.

4. Cookies

We use essential cookies required for the service to function, as well as cookies set by Google Analytics and Google reCAPTCHA for anonymous analytics and spam protection. We also use localStorage to store your supporter status token. We do not use cookies for advertising purposes.

5. Data Sharing

We do not sell, trade, or rent your information to third parties. We only share data with the third-party services listed above, strictly for the purpose of providing our service.

6. Data Retention

Bouquet data is stored indefinitely unless you request deletion. You may request deletion of your bouquet by contacting us with your bouquet link. Supporter tokens and associated Ko-fi email addresses are stored indefinitely to preserve supporter access. You may request deletion of your supporter data by contacting us, with the understanding that this will permanently revoke your supporter perks.

7. Your Rights

You have the right to:

Request information about the data we hold related to your bouquets.
Request deletion of your bouquet data.
Request deletion of your supporter data (Ko-fi email and token), understanding this will revoke your supporter perks.
Withdraw consent at any time.

8. Children's Privacy

Our service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will post a notice on our site for any significant changes.

10. Contact Us

If you have questions about this Privacy Policy, please contact us at thebouquetsite@gmail.com.