Privacy

Updated November 7, 2026

What we collect

Organizers give the recipient’s name, an occasion, an email address and, if they choose, a first name and reveal date. Signers give a name and a message. Someone reporting a card gives a reason.

How it’s used

We use this information to run the card, send the organizer’s private link and reminders, and handle reports. Signers’ messages are shown to the organizer and to anyone with the recipient link once the card opens. We don’t sell personal information. Some US state laws treat Google’s personalized ads as “sharing” personal information, and you can opt out with the Do Not Sell or Share link at the bottom of public pages.

Who handles it

• Hostinger hosts our server, database and backups.
• Resend delivers our emails.
• Google Fonts supplies the site’s fonts, so your browser asks Google for them.
• Google Analytics counts visits to our public pages, such as the home page and occasion guides. It receives the page address without any query string, your browser and device type, and an approximate location from your IP address. It never runs on sign, manage or card pages, so it doesn’t see names, messages or links. You can block it with the Google Analytics opt-out add-on or most ad blockers.
• Google AdSense may show ads on public pages, such as our occasion guides. Google and its partners use cookies to show ads based on your visits to this and other sites. You can turn off personalized ads in Google’s ad settings or at aboutads.info. In US states with privacy laws, a Do Not Sell or Share My Personal Information link at the bottom of public pages lets you opt out of ads based on your activity. You can also read how Google uses information from sites that use its services. Ads never appear on cards, or on sign or manage pages.

Our server logs record the page type, time and status of each request. They don’t record IP addresses or the private parts of card links.

Cookies

Sign, manage and card pages set no cookies. On public pages, Google Analytics sets cookies (named _ga) that tell repeat visits apart, and Google’s ad cookies may be used to show and measure ads. These can last up to 2 years. In the European Economic Area, the UK and Switzerland, Google asks for your consent first, and without it these cookies stay off.

How long we keep it

Cards are deleted about 12 months after they open, or 12 months after the planned date if they never open. Opened cards get an email warning about 30 days before deletion. Organizers can delete a card at any time. Deleted information can stay in our nightly backups for up to 14 days.

Children

EveryoneSigned isn’t meant for children under 13, and we don’t knowingly collect their information.

Contact

Questions or removal requests: support@bringalist.com.