Policies
Privacy
We collect only what we need to make and deliver your order — your name, contact details, and address — and to run your box's digital layer if you choose to claim it.
Each box has its own page, which opens with no app and no account. To set it up and receive reminders, the owner signs in once with their email — only they can attach an account to the piece, and personal details stay with that account.
A Travel Diary has a shareable page, and it is private until its owner decides otherwise. There are three settings and the owner picks one: only them, anyone they send the link to (protected by a separate code), or public and findable in search. Nothing is shared by default, the setting can be changed back at any time, and turning it down removes the information rather than hiding it — a page that is switched off returns nothing at all, not a page with the numbers greyed out.
Photographs added to a Travel Diary are stored by us and shown only where that page's settings allow. We strip the hidden data your camera writes into a picture — including where it was taken — before it leaves your browser. You can download everything you have ever added, pictures included, from your account at any time, and deleting the diary deletes the pictures with it.
If a shared page concerns you — because it is about a child, because it shows something private, or because it is not the owner's to publish — every shared page carries a Report link. You do not need an account to use it, and a report reaches a person.
We don't sell your data. Payments are handled by Razorpay; we never see your full card details. Questions? Email us.