privacy

A friend chose something for you. That's the whole transaction, and it's all we keep.

What we store

• Your email, so the sign-in link has somewhere to go.
• Your name, as it appears on the cards you send.
• The links you send, the line you wrote, and the name you typed for the person it's for.
• When a card was opened, and by which browser. That's the seal. The sender gets one signal back and nothing else.
• A cookie in your browser so cards you open can find you later if you sign in.

What we never store

• The media. Songs, reels, places and articles play in their own players. We keep the address and a title, never the thing itself.
• Your contacts. A recipient is a name you typed, nothing more.
• Tracking beyond the seal. No analytics scripts, no ad pixels, no profiles, no feed.
• Replies, likes, comments or counts. There aren't any.

Who sees what

The person who sent you a card sees that you opened it. Nobody sees what anyone else was sent. The founder can see totals, not people, to learn whether deepcut is worth building.

Delete everything

Email hello@deepcut.day from the address you signed in with and say “delete me”. Your account, your cards and every record of who opened them are gone within a few days, and we'll reply when it's done.

deepcut is a two-week experiment with a handful of people. Data lives on Supabase and the site runs on Vercel. Sign-in emails go through Resend.