Privacy

Last updated: 2026-05-14

What we collect

• Your email — used only to sign you in (one-time OTP code) and to send you notifications about your gestures. We do not send marketing email.
• Gesture content — the photos, captions, letters, and prompts you author. These are stored in our database and (for photos) in our object storage so that the person you sent the gesture to can view it.
• View counts— when a recipient opens a gesture you made, we record the count and the time it was opened so you can see whether they've seen it.

What we don't collect

• No analytics cookies.
• No tracking pixels.
• No information about the people you send gestures to (no name, no email, no IP logging beyond what our infrastructure providers do for security).

Where it lives

Data is stored with our infrastructure providers: Supabase (database, auth, and photo storage), Resend (transactional email), and Vercel (hosting). Each has its own privacy policy.

How long we keep it

• Drafts auto-purge 30 days after they were last edited.
• Photos in published gestures auto-archive 90 days after the recipient finishes viewing the gesture — the gesture itself stays, but the photo files are removed to keep this free for everyone.
• Everything else stays until you delete it or delete your account.

Deleting your data

You can delete any gesture you made from your dashboard. To delete your account and everything tied to it, email hello@email.cute-gestures.com.

Contact

Questions: hello@email.cute-gestures.com.