Privacy

Last updated September 2026

unwrap. is built so we see as little of your surprise as possible.

Your photos and words

Photos, names, letters and dates you add in the maker stay in your browser while you work. Nothing is uploaded while you make or preview.

Your account. To publish a link you sign in with Google. We receive your name, email address and profile picture from Google, and create the name used in your links from it.

Published surprises. When you publish, we store your surprise (names, message, letter, date and photos) so it can open at your link. Links are hidden from search engines and only open for people who have the link. We don't look at surprises unless one is reported to us or the law requires it.

Links stay live for 12 months. You can edit or delete a surprise any time from My Account; deleting removes its words and photos. Data is stored with Supabase.

Downloaded files. If you download instead, your surprise is packed into the file on your own device and nothing is uploaded. Only the people you send that file to can see it.

To save you retyping, your browser keeps a draft of your text (not your photos) on your device, Clearing your browser data removes them.

Payments

Payments are handled by Razorpay. We receive a payment ID and whether the payment succeeded. We never see or store your card, UPI or bank details. Razorpay's own privacy policy applies to the information you give them.

What we collect

If you report a link, we store your report (the link's ID and what you wrote) so we can review it.

Our hosting provider keeps standard server logs (such as IP address and browser type) for security and to keep the site running. We don't sell your data or use it for advertising.

Questions? Email hello@hellounwrap.com.