Privacy policy

1. Controller

The controller for data processing on this website is:

Email: [Email to be added]

2. In short

Little Plans is a service for animated invites. We only process the data we need for that. We don't sell data and use no advertising or analytics trackers.

3. Hosting and server logs

The website runs on Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, USA). For every page request Vercel processes technically necessary data: IP address, time, address requested, browser and operating system. This keeps the service secure and stable (Art. 6(1)(f) GDPR). Logs are kept only briefly.

Vercel is certified under the EU-US Data Privacy Framework; we also have a data processing agreement with standard contractual clauses. More: Vercel's privacy policy.

4. Database and file storage

Accounts, invites, photos and replies are stored with Supabase (Supabase Inc., USA) in a data centre in Ireland (EU), under a data processing agreement with standard contractual clauses. More: Supabase's privacy policy.

5. Account and sign-in

An account needs only your email address. To sign in, we email you a link or code. We process your email address to provide your account and send sign-in emails (Art. 6(1)(b) GDPR). It's kept until you delete your account.

6. Invites

What you write or upload in an invite is stored so it can be shown (Art. 6(1)(b) GDPR): template, the invited person's name, question, note, icon, GIF, photos, place, song link and the invite's language. Anyone with the link can see the invite; search engines are asked not to index it.

Photos are resized in your browser before upload, which removes metadata such as where they were taken. Photos no invite uses are deleted automatically within two days.

Free invites are live for 30 days; after that the link only says the invite has ended. The content stays in your account until you delete the invite or your account.

Please only upload photos and names of other people with their permission.

7. Replies to invites

Replying sends us the answer (yes, maybe or no) and, if you like, a name, a message and a suggested time. The person who sent the invite sees it (Art. 6(1)(b) and (f) GDPR). Replies are deleted with the invite. So you can change your reply for 24 hours, your browser remembers its id (local storage).

8. Views

We count how often an invite is opened and store the first and last time. We store nothing about the person opening it. So a reload doesn't count twice, the browser remembers the view for as long as the tab is open.

9. Preventing abuse

To prevent abuse (such as mass sign-in emails or guessing invite links), we limit how often an IP address, email address or account can perform certain actions. For this we store these only as a keyed hash (which can't be reversed) with a counter and delete them within two days (Art. 6(1)(f) GDPR).

10. Cookies and browser storage

We only use what the service needs, which is why there's no cookie banner:

• Sign-in cookies (sb-…): keep you signed in until you sign out.
• Language cookie (lp_locale, 1 year): remembers the language you chose.
• Return cookie (inviva_auth_return, 1 hour): brings you back to the right page after signing in.
• Local storage: your invite draft and your latest reply to an invite, only in your browser.

The legal basis is § 25(2) no. 2 TDDDG, and for the processing that follows Art. 6(1)(b) or (f) GDPR.

11. GIFs from GIPHY

GIF search in the builder goes through our server to GIPHY (Giphy, Inc., USA), which only sees the search term. The GIFs themselves load directly from GIPHY's servers, in the builder and in invites with a GIF, so GIPHY receives your IP address and browser data (Art. 6(1)(f) GDPR, our interest in offering GIFs). More: GIPHY's privacy policy.

12. Music from Spotify

If an invite has a song, Spotify's player only loads when you tap “Play the song”. Only then does Spotify AB (Regeringsgatan 19, 111 53 Stockholm, Sweden) receive your IP address and browser data, and it may set cookies. The legal basis is your consent by tapping (Art. 6(1)(a) GDPR, § 25(1) TDDDG), for that visit only. More: Spotify's privacy policy.

13. Maps

If an invite has a place, we show an “Open in Maps” link. Nothing goes to Apple or Google until you tap it; after that, their privacy policies apply.

14. Payments via Stripe

When you buy Premium, you pay on a page run by Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland). Stripe processes your payment details; we never receive them. We only store a customer number, your plan and its term (Art. 6(1)(b) GDPR). Invoices are kept as long as tax and commercial law require, usually ten years (Art. 6(1)(c) GDPR). More: Stripe's privacy policy.

15. Emails

Notifications about replies to your invites and sign-in emails are sent via Resend (Resend, Inc., USA), under a data processing agreement with standard contractual clauses (Art. 6(1)(b) GDPR). More: Resend's privacy policy.

16. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time for the future (Art. 7(3)). Email us at [Email to be added].

You can delete your account, with all its invites, replies and photos, yourself at any time: at the bottom of the “My invites” page.

You can also complain to a data protection supervisory authority, for example where you live or where we're based (Art. 77 GDPR).