Privacy Policy
Effective October 26, 2026
How Scratch N Discover handles information when you create, send, open, or claim a Scratch.
Information you provide
We process the design, hint, hidden message, optional reveal photo, optional voice recording, optional recipient gift link, and other content you submit to create your Scratch. Purchases involve an email address, order references, and payment status. Business accounts include business and account details. Support requests and optional email signups include the information you submit.
Gift links and service requests
Optional recipient gift links are stored with your Scratch attachments and shown to people who hold your Scratch link. This can grant access to a redeemable gift, so share the Scratch privately. We do not retrieve or preview the external gift link. Opening it takes the recipient to the provider, which handles information under its own policies. Make It for Me requests collect your name, email, occasion, requested date, design preference, and brief for follow-up.
Payments and service providers
Stripe processes payments. Do not send us full card numbers or security codes. Our hosting, storage, authentication, payment, and email providers process information needed to operate the service. Infrastructure used by the service includes Cloudflare, OpenAI Sites, Vercel, and Stripe. Providers may process information in countries other than your own.
Recipients and private links
Anyone with a received Scratch link can open its message and any attached photo, voice recording, or recipient gift link, and may forward it or save a copy. Keep links private if the message is personal. Recipient pages are marked not to appear in search results; this does not make a forwarded link confidential. Do not include passwords, payment details, identity documents, or other sensitive information in a message.
Photos, voice notes, and microphone access
Photos and voice notes are optional. We request microphone access only when you choose to record. Draft photos and voice recordings are stored in your browser before submission. Photos are resized and re-encoded as JPEGs, removing camera metadata; audio is converted to a standard playback format. Submitted attachments are stored with our hosting provider and linked to the relevant checkout or gift. We use them to provide the requested reveal and playback, not as advertising content. Anyone holding the gift or attachment link can access the attachment.
Upload retention
Local drafts remain on your device until removed, replaced, or cleared by you or your browser. Submitted photos and voice recordings currently have no automatic expiration or scheduled deletion date, including uploads associated with an unfinished checkout. Gift attachments are retained to keep their links working until removed following a verified deletion request, a content-policy decision, or service closure. Email hello@scratchndiscover.com with your order reference to request removal; do not send payment-card details. Legal or dispute-related records may need to be retained. Removing our copy cannot remove copies recipients have saved or forwarded.
Business campaigns
A merchant may ask for your name, email, or phone number when requested when you claim an offer. The merchant receives claim details to fulfill and redeem its reward. Campaign activity, including opens, reveals, claims, and redemptions, can be recorded for campaign reporting and abuse prevention. Contact the merchant about its use of your information; contact us for help identifying the relevant campaign. Claiming a reward does not itself subscribe you to Scratch N Discover marketing.
How information is used
We use information to create and deliver Scratches, verify payment, provide account access, fulfill campaign claims, prevent misuse, respond to support requests, and maintain the service. Optional design-update signup is separate from purchase or recipient access. You can ask to stop marketing emails at any time.
Optional email reminders
Email reminder choices are separate and unchecked by default. We send a confirmation link before activating choices. You can choose daily puzzles, weekly inspiration, and one reminder about a saved design. We record your choices and consent time and use Resend to deliver emails. Saved-design reminders stop when checkout opens and return you to the selected design; private messages stay in your browser draft. Every reminder includes preference and unsubscribe links. Reminder emails are limited to one per person per New York calendar day. Contact us to request deletion.
Browser storage and measurement
The service uses browser storage for drafts, pack selections, sound preferences, sample-invitation choices, and necessary account or purchase functions. Hosting providers may receive technical request information such as IP addresses and browser details. Any optional audience-measurement tools configured on this site require your choice before loading. Private messages, recipient link tokens, claim details, and payment session references must not be sent to advertising tools. You can manage optional measurement on this page.
Sharing and retention
We share information with service providers needed to operate the service, with the merchant when you claim its offer, when you instruct us to share, and when necessary to respond to lawful requests or protect the service. We do not sell your hidden messages or use them as marketing content. Records are retained for delivering the service, maintaining purchased links, handling support and disputes, and meeting applicable recordkeeping obligations. Contact us to request deletion; some payment or legal records may need to be retained.
Your choices and requests
You can request access, correction, or deletion of your information by contacting us. We may need to verify that a request relates to you before acting. Your rights depend on where you live. For details collected by a merchant, that merchant may need to handle the request. Clearing browser storage removes local drafts and preferences, but does not delete server records.
Children and updates
Purchasing and business-account features are intended for adults. If you believe a child submitted personal information without appropriate permission, contact us. We update this policy as practices change and show the latest effective date here.
Optional measurement choices
Analytics is off. These choices do not affect necessary account, payment, or reward functions. Your preference applies immediately to this browser.