Privacy Policy & Cookies
Last updated: 26 July 2026
This policy explains what personal data this site collects, why, and what rights you have over it.
Who is responsible for your data
I Love You From... is responsible for the personal data described in this policy. For any privacy question or request, contact michael@creotec.com.
What we collect
Depending on how you use the site, we may collect:
- Account data: your name, email address, and a securely hashed password (we never store your password in plain text)
- Content data: any message, display name, and photos you choose to submit
- Technical data: your IP address and basic request logs, kept for security and to prevent spam/abuse (e.g. login rate-limiting)
- Preference data: your chosen language, so the site displays correctly next time
Why we use it
We use account and content data to provide the service you've asked for (create your account, display your messages). We use technical data on the basis of our legitimate interest in keeping the site secure and free of spam. We don't use your data for advertising, and we don't sell it to anyone.
Cookies
This site uses a small number of cookies, all needed for it to work properly:
- A session cookie that keeps you signed in while you browse — deleted when you close your browser
- A language-preference cookie (kept for 365 days) so the site remembers which language you chose
We don't use advertising or analytics cookies, and no third party can track you through this site.
How long we keep data
We keep your account and content data for as long as your account is active. Unverified registrations are automatically deleted after 24 hours if you don't confirm your email. You can ask us to delete your account and data at any time (see "Your rights" below).
Who we share it with
We share the minimum needed with our email delivery provider, solely to send you account-related emails (verification, password reset, message-status notifications), and, if you choose to donate, with Stripe to process that payment (see "Donations" below). We don't share your data with advertisers, analytics companies, or any other third party, and we never sell it.
Donations
If you choose to donate to a place, you're redirected to Stripe to complete the payment. Stripe collects and processes your payment details directly - we never receive, see, or store your card number or other payment details. We do receive limited details about the donation itself (the amount, currency, and which place it was for) so we can attribute it correctly. Stripe's own privacy policy governs how they handle your payment data.
Where your data is stored
Your data is stored on servers operated by our hosting provider, with appropriate technical safeguards in place. If any data is ever transferred outside the UK, we ensure appropriate safeguards are in place to protect it.
Your rights
Under UK data protection law, you have the right to:
- Access the personal data we hold about you
- Ask us to correct inaccurate data
- Ask us to delete your data ("right to be forgotten")
- Ask us to restrict how we use your data
- Object to us using your data in certain circumstances
- Ask for a copy of your data in a portable format
To exercise any of these rights, email michael@creotec.com.
If you're not satisfied with how we've handled your data, you can complain to the UK's Information Commissioner's Office at ico.org.uk.
Children
This site isn't directed at children under 13. If you believe a child has provided us with personal data, please contact us and we'll remove it.
How we protect your data
Passwords are securely hashed (never stored as plain text), the site is served over HTTPS, and all database access uses parameterised queries to protect against common attacks. Admin accounts can also enable two-factor authentication.
Changes to this policy
We may update this policy from time to time; the "last updated" date at the top of this page will change when we do.
Contact
Questions about this policy or your data? Email michael@creotec.com.