Privacy
This project privacy information applies alongside the general Tender Machine privacy policy.
No account is needed to make or open a gift. Names, notes, photos and recordings are encrypted in your browser before being saved. The keys travel in the ticket and gift links. Keep those links private: a person who has a link can use the access it provides.
We store the encrypted gift and the records needed to run it, including its companion, selected world, dates, status and purchase reference. Payment is handled by Lemon Squeezy; we do not receive your card details. The browser also keeps a local copy to help you return to your draft.
Gift contents stop being available at the displayed expiry date. Scheduled cleanup removes expired content from the active store. The receiver’s delete option removes the stored content and its gift-link record sooner. Downloads and browser copies are separate; service backups and operational logs may follow their providers’ retention schedules.
We keep purchase and ticket records needed to provide the service, handle payment issues and meet record-keeping obligations. Short-lived request records help limit misuse. These records are separate from the gift’s contents.
If you ask us to email your tickets, your email address and the ticket images are sent through Resend. The images contain links that can start or reopen your boxes, so treat the email as private. This request does not sign you up for a newsletter. We keep email delivery references for up to 30 days.
Vercel hosts the site and server functions; Supabase stores the project’s data in Seoul, South Korea. Lemon Squeezy handles payments and Resend sends requested ticket emails. To ask about your data or a purchase, contact support@tender-machine.com. The general Tender Machine privacy policy also applies.