Privacy

What we collect

• Reveal details supplied by an owner, including names, timing, the encrypted reveal answer, and an optional photo.
• Basic Google account information—name, verified email address, and optional profile image—when an owner chooses Google sign-in.
• Guest first names, predictions, notes, and anonymous session identifiers used to keep each visit working.
• Short front-camera video and reveal timestamps only when a guest clearly opts in to Reaction Capture.
• Limited technical and delivery information needed to secure the service, retry uploads, and send owner emails.

How we use it

We use this information to run the reveal, protect the secret until its scheduled time, build the owner’s private Time Capsule, prepare an optional reaction montage, provide owner sign-in, prevent abuse, and send requested reveal updates. Google account data is used only to identify the owner and connect their reveals to their private profile. SecretPop does not request or store Google access or refresh tokens.

We do not sell personal information or use it for targeted advertising.

Reaction Capture

Camera access is optional, obvious, and requested only after a guest chooses to be part of the keepsake. SecretPop records video without microphone audio. Declining never changes or delays the reveal.

Raw footage is scheduled for deletion within seven days and is removed sooner after a montage is successfully prepared. The selected short clip and finished montage remain in the private Time Capsule until an authorized removal. A guest may remove their clip from the same browser session, and the reveal owner can remove an individual clip at any time.

Who can see and process it

Predictions, notes, photos, and opted-in reaction clips are available to the reveal owner through their private profile or private owner link. A montage is shareable only when the owner intentionally creates or uses its separate view-only link. We use service providers such as Google for sign-in, Cloudflare for hosting and private storage, and Resend for transactional email. They process data only to provide those services for SecretPop.

Security, cookies, and choices

Reveal answers are encrypted and are not sent to guest browsers before the reveal moment. Secure cookies keep owner and guest sessions working; an owner sign-in session lasts up to 30 days, and SecretPop does not use advertising cookies. Owners should keep private Time Capsule links private and can remove reaction clips from the owner view. To ask about access, correction, or deletion of other information, email hello@secretpop.ai.

Children and changes

SecretPop is intended for adults organizing and joining family reveals, not for children to use independently. We may update this notice as the service evolves and will post the effective date here.