Privacy

Last updated 11 November 2026

Short version: you can make and send bouquets without an account, and then we store nothing about you. If you sign in, we keep your email address and the bouquets you choose to save. You can delete both at any time.

Without an account

• Gift links. To give you a short link like bloomgift.co/for/mia-7k2q9x, we store the gift: the bouquet, a small picture of it, the "To" and "From" names and your message, plus the sender's language. Anyone who has the link can open the gift, so share it only with the person it is for. We count how many times a link is opened (not who opened it), so a signed-in sender can see "Opened" in their profile. If we cannot make a short link, you get a long link instead, which keeps everything in the link itself and is never stored.
• Your browser. Your bouquet in progress, your language choice and whether you've seen the "How it works" card are kept in your own browser (local storage). They never leave your device.

With an account

• Your email address, to sign you in and to know which bouquets are yours. If you sign in with Google, we receive your email address and the name on your Google account (used as your display name, which you can change). We don't send newsletters or share your email with anyone.
• Your display name, shown on your profile and filled in as "From" when you send a gift.
• Bouquets you save: the flowers, vase and lettering, a small picture of the bouquet, a name and the dates it was saved.
• Gifts you send while signed in: when you copy or share a gift link, a copy goes to the Sent list in your profile, with the recipient's name, your message and the date. Only you can see this list, and you can remove any entry.
• Sign-in records kept by our login provider for security, such as when you last signed in.

Who handles the data

• Supabase runs our login and stores saved bouquets.
• Cloudflare serves the website.
• The page loads its 3D engine and fonts from jsDelivr and Google Fonts, which see your IP address like any website you visit.

There are no ads and no tracking cookies. Chat apps that show a preview of a gift link see the recipient's name, the sender's name and the bouquet picture.

How we count visits

• Cloudflare Web Analytics counts page views, the country, the type of device and the site that linked here. It uses no cookies and does not follow you across sites.
• Our own step counts. To learn where people get stuck, the page notes when a visit reaches a few steps: arriving, adding a first flower, opening "Gift it", making a link, copying or sharing it, opening a gift, and making one back. Each tab gets a random visit number that is forgotten when the tab closes. These notes never include your name, email, account, message or who the gift is for.
• If your browser sends Do Not Track or Global Privacy Control, our own step counts are switched off.

Deleting your data

Open the account menu (the round button at the top), choose My profile, and delete any bouquet or sent gift there, or use Delete account to remove your email, name, saved bouquets and Sent list. Gift links you already sent keep working, because they carry the bouquet themselves.

Contact

Questions, or want something deleted that you cannot delete yourself? Email nebula.heights.ventures@gmail.com.