Privacy Policy

Last updated: October 2026

sendtoboo (“we”) lets you build a surprise page and share it with someone. This page explains what data we handle. Questions: hello@sendtoboo.com.

What we collect

• Account: your email, name and profile photo when you sign in with Google, or your email if you use an email link.
• Your content: the surprise pages you create, including text, links and photos you upload.
• Replies: the answers a visitor submits on your page. Visitors do not need an account and we do not ask for their name or email unless you add such a question yourself.
• Technical data: basic logs such as IP address and browser type, kept by our hosting providers for security and reliability.

How we use it

To run the service: show your page to people with your link, deliver replies to your dashboard, keep accounts secure and prevent abuse. We do not sell personal data and we do not show ads.

Who can see what

Anyone with the link to a published page can see its content. Only you can see your drafts and your replies. If you add questions that ask for personal details, you are responsible for how you use those answers.

Service providers

We use Supabase (database, sign-in and file storage), Cloudflare (hosting and domain), Google (sign-in, fonts) and YouTube (if you add a song or video). They process data on our behalf under their own terms.

Retention and deletion

You can delete any surprise, together with its replies, from your dashboard at any time. To delete your whole account, email us from your sign-in address and we will remove it.

Your rights

You may ask to access, correct or delete your personal data, including under Sri Lanka’s Personal Data Protection Act, No. 9 of 2022. Email us and we will respond within a reasonable time.

Children

sendtoboo is for people aged 18 and over. Do not create pages for or collect data from children.

Changes

We may update this policy and will change the date above when we do.

This is a plain-language summary and not legal advice.