Privacy Notice.

YoursToOpen is an independently run service based in Europe, available at yourstoopen.com. In this notice, “we”, “us”, and “our” refer to YoursToOpen. This notice covers the public website, creator tools, accounts, payment-related records, support channels, and private recipient experiences. Contact info@yourstoopen.com with privacy questions or requests.

A creator supplies the content of a reveal, which can include information about someone else. Recipients do not need an account or an app. Private creations are not public profiles and are not listed in a public gallery or sitemap. Anyone with a generated private link may be able to open it; share it carefully.

Depending on the features you use, we process names, messages, a photo, invitation details, recipient choices and replies, delivery settings, recovery email, and optional password settings. An account also involves your email, sign-in details, and account preferences. If you use Google sign-in, we receive the account information needed to authenticate you.

We receive the information you send in a support enquiry, privacy request, or safety report. A safety report can include a private reveal link, a reason, optional details, and an optional contact email. Submit private links only through the dedicated safety route when needed.

Provide only information needed for the experience. Do not include payment credentials, government identifiers, health information, or another person’s sensitive information. Creators are responsible for having permission to use the content they supply.

The service processes link and access-verification values, publication status, opening and expiry settings, recipient responses, and lifecycle events such as revocation and deletion. Delivery information can include open and completion counts and first- and last-open times. These signals are not proof of a particular person’s identity or attendance.

First-party acquisition reporting uses aggregate counts by approved landing-page and experience categories. That reporting does not store visitor identifiers, full URLs, query strings, referrers, IP addresses, user agents, or browser fingerprints. This is separate from security logs and Microsoft Clarity session replay.

Hosting, security, sign-in, anti-abuse, and payment providers may process IP addresses, browser and device information, request metadata, and security logs to operate their services. The absence of an IP address in our aggregate reporting does not mean that no provider processes it.

We use information to create and deliver the requested experience, operate accounts and recovery, process purchases, protect access, handle responses, provide support, investigate abuse, meet legal obligations, and improve reliability and usability.

Where data-protection law requires a legal basis, the relevant grounds depend on the processing: providing the service you request, compliance with legal obligations, legitimate interests in security and service operation, and consent where required. You can contact us for information about the basis used for a particular activity. An optional analytics choice is separate from accepting the Terms of Service.

Access is limited to people and providers who need information to deliver, host, secure, maintain, or support the service, process payments, or handle a lawful request. Relevant services include hosting and infrastructure, email delivery, Cloudflare security and human verification where enabled, Google sign-in when selected, Microsoft Clarity, and the Stripe or PayPal payment flow offered at checkout.

Paid Memberships Pro manages order and membership records in WordPress. The selected payment provider collects payment credentials on its payment surface. YoursToOpen keeps order, entitlement, purchase, and support information needed to operate the service; it does not store your full card details or PayPal password.

The intended recipient receives the content you share. Depending on the experience, the creator can receive opening signals, choices, and written replies. A reply may be retained even when the creator’s current Free access hides its text; an eligible upgrade can make that retained reply readable. Do not submit a reply you would not want the creator to receive.

We may disclose information when required by law or reasonably necessary to investigate abuse, protect people, or defend legal rights. Private recipient content is not a public advertising catalogue.

Cookies and browser storage support sign-in, security, access to password-protected reveals, draft recovery, and remembered preferences. Clearing storage can sign you out, remove a local draft, or require you to choose your preferences again. Essential storage and optional analytics have different purposes.

We remember your analytics preference in this browser until you change it or clear browser storage. The preference does not automatically expire. If analytics storage is allowed, Clarity may use browser identifiers such as _clck, _clsk, and _cltk. Microsoft explains its cookies and retention in its documentation.

Use Analytics settings in the website footer to allow analytics or choose Only essentials. You can also block or clear storage in your browser. Blocking cookies alone does not necessarily stop cookieless recipient replay; see the next section.

• Microsoft Clarity cookies ↗

Microsoft Clarity helps us understand use through session replay and heatmaps. It can process page structure, interactions such as clicks and scrolling, timing, browser and device information, and network metadata. Session replay is separate from aggregate product reporting and is not limited to public marketing pages.

On public pages and other application screens, replay requires an explicit Allow analytics choice. These screens can include creator, account, sign-in, checkout, contact, and safety surfaces. Payment details entered on a separate payment provider’s website are governed by that provider’s controls and notice.

Generated private recipient links and their aliases use a different default: session replay can start without a banner or a saved analytics choice, with Clarity analytics and advertising storage denied. An existing valid Allow analytics choice permits analytics storage. A saved refusal, Global Privacy Control signal, or unreadable or invalid preferences prevents replay. Cookieless replay still sends information to Microsoft; it is not the same as no data collection.

The integration redacts private link capabilities, query strings, email addresses, signed media URLs, and credential-bearing QR data from replay transport. Content masking also depends on the service’s Clarity configuration. These measures reduce disclosure risk and are not a guarantee that no personal information is processed.

To stop replay in this browser, visit a public YoursToOpen page, open Analytics settings in the footer, and choose Only essentials. The choice is also applied to recipient pages in that browser; withdrawal stops recording and reloads affected open pages. Clearing the saved refusal can restore the recipient default. A supported Global Privacy Control signal also keeps replay off.

Microsoft applies its own retention rules to replay and heatmaps. See its current documentation for the relevant periods and exceptions. Contact us about information already collected; changing your preference does not by itself delete earlier recordings.

• Microsoft Privacy Statement ↗
• Clarity retention and privacy information ↗

The service’s Clarity integration keeps advertising storage denied. An analytics choice is not permission for personalized advertising. External gift links, payment providers, and other websites have their own notices; review them before sharing information.

Google AdSense advertising is not part of the integration described in this edition. If we introduce advertising, we will update this notice to identify the providers, explain the information they collect and use, and describe the available choices before it begins. This notice does not grant advertising consent.

• How Google uses information on partner sites ↗

Generated recipient and edit links use high-entropy access values. A readable custom alias requires a separate password. Private recipient routes are marked to discourage search indexing and are excluded from public sitemaps. These measures do not stop a person who already has access from forwarding a link, copying content, or taking a screenshot.

We use access controls and protected storage to reduce risk. No online service is completely secure. Keep creator access and recovery links private, use a strong account password, and revoke a reveal if it has been shared beyond the intended audience.

Free links last 24 hours. New Premium publications have 90 days of hosting from their opening date. Eligible expired Free experiences can be upgraded within 30 days after expiry. Existing legacy PRO publications retain their purchased availability rules. The dashboard shows the applicable deadline; revocation or deletion can end availability earlier.

A link becoming unavailable is different from every associated record being erased immediately. Expiry, deletion, and cleanup follow the service lifecycle. Retained replies, recovery data, account records, payment records, security logs, support requests, and safety reports can have different retention needs.

We retain information only as needed for its purpose, an active account or request, security, dispute handling, and applicable accounting or legal duties. Backup copies and records subject to a legal hold may remain after removal from the active service. Contact us for the retention criteria that apply to a particular record or a deletion request.

Our providers may process information outside your country. The countries and safeguards depend on the provider and activity. Where applicable law requires transfer safeguards, those requirements apply in addition to this notice. Contact us for details about the providers, processing locations, and safeguards relevant to your information.

Use the creator or account controls to manage available creations, revoke links, and request deletion. Contact info@yourstoopen.com to ask about access, correction, deletion, restriction, objection, or portability where applicable. We may need proportionate information to verify a request; do not send passwords or payment credentials.

Where processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing. You may also complain to the relevant data-protection authority where that right applies, including an authority in the place where you live, work, or believe an infringement occurred. Contacting us first is optional.

If a creator included information about you, you can contact us or submit a safety report without an account. We may need the private link through the dedicated reporting route to locate the content.

• Report content or request removal ↗
• EEA data-protection authorities ↗

Creator, account, and purchase features may be used only by people legally able to agree to the terms or with the permission required by applicable law. A recipient can open a reveal without signing in. Do not submit sensitive information about children or use the service to exploit, manipulate, or endanger anyone.

If you believe a child’s information has been included improperly, contact us or use the safety form so we can review the concern.

We update this notice when the service or its data practices change. The date above identifies this edition. Where required, we will provide additional notice or obtain consent for material changes. For privacy questions, email info@yourstoopen.com or use the contact page.

• Contact YoursToOpen ↗
• info@yourstoopen.com ↗