Plain-language privacy

Your little things stay between you.

Amourette stores the names, surprise messages, reunion plans, and daily notes you choose to add so your shared space works across visits. Optional surprise photos are kept in private file storage and become unavailable 30 days after their reveal date. Your space is accessible only through its private member and invitation links, but it is not end-to-end encrypted. Do not include passwords, banking details, or information that would put you at risk if exposed.

We do not sell your messages or create public profiles. Anyone with a valid private link may be able to access the related space, so treat those links like passwords.

Your browser remembers your membership with an HttpOnly cookie. In Your access & settings, you can save a personal access link for another device or replace it to revoke older links and sessions. Your partner cannot retrieve your credential. Invitations let one person join; they do not restore existing membership. There is no email recovery if every link and signed-in browser is lost.

We count activation events in daily totals only: space created, first surprise scheduled, partner joined, and first surprise opened. Those counters contain no member IDs, message bodies, photos, private links, or IP addresses. We do not load third-party analytics. Hosting providers process network requests to run the service; older access links include a credential in their URL path. New personal links put that credential after the # so it is not sent as part of the page URL.

Photo access expires at 12:00 UTC, 30 days after the selected reveal date. Expired photos become inaccessible and are removed from file storage when requested; there is no background deletion scheduler yet. Text and expiry information remain. Photo expiry is shown before upload and with your saved surprise.