MyBirthdayLast updated: 28 October 2026.
What we keep
- The card. The names, the age, the message and the choices you made, so the card can be shown at its link. We also note when it is opened and replayed, to tell the sender.
- Your account, if you make one: your email address, your name, a password (stored hashed, never readable) or your Google identifier. We send the emails needed to confirm your address, reset your password and tell you a card was opened.
- Purchases. The amount, the currency, the date and the Stripe reference, for your invoices and our accounts. Your card number goes to Stripe and never reaches us.
- Visits. Google Analytics, with advertising storage and personalisation switched off. No advertising cookies, no retargeting.
What we do not do
We do not sell or rent data. We do not show ads. We do not read the cards, except when you ask us to help with one.
Who sees the card
Anyone with its link. Links cannot be guessed and the card pages are excluded from search engines. Do not put in a card what you would not put in a message to the same person.
Where it lives
On servers in the European Union (Hetzner, Germany). Emails go through Resend, payments through Stripe, sign-in with Google through Google.
Deleting
Delete your account from your Account page: your cards, their links and your data are removed. Without an account, write to [email protected] with the card’s link and we remove it.
Children
The site is meant for adults sending cards. Cards are often for children, which is why a card never asks the person who opens it for anything.