Privacy Policy

Last updated: May 28, 2026

Who We Are

FORGETMENOTS, LLC ("ForgetMeNots," "we," "us," or "our") is a limited liability company registered in the State of Michigan. We operate the website forgetmenotscards.com and the digital greeting card platform accessible through it.

If you have questions about this policy, contact us at: admin@forgetmenots.site

What Information We Collect

Account holders (hosts)

Full name and email address provided at registration
Password (stored as a one-way hash — we cannot read it)
Payment information processed through Stripe — we do not store card numbers, expiration dates, or CVV codes on our servers

Event guests

Name provided when submitting a card or message (optional)
Photos and videos uploaded as part of a card submission
Written messages included with a card submission

Newsletter subscribers

Email address submitted voluntarily through the newsletter signup form on our website

Automatically collected

IP address, browser type, and device information for security and fraud prevention
Session cookies required for login functionality
Spam protection data: our contact and submission forms use a proof-of-work challenge (Altcha) and a honeypot field to detect and block automated submissions. No data from these mechanisms is transmitted to third-party servers.

How We Use Your Information

We use the information we collect to:

Create and manage your account
Process payments through Stripe
Allow guests to send digital cards and media to event hosts
Send transactional emails (receipt confirmations, contact form replies)
Send newsletter communications to subscribers who have opted in
Investigate abuse, spam, or security incidents
Comply with applicable law

We do not sell your personal data. We do not use your data for advertising.

Newsletter Communications

If you subscribe to our newsletter, we will use your email address to send you updates about our platform, new features, and event inspiration. You may unsubscribe at any time by contacting us at admin@forgetmenots.site. We will remove your address from our mailing list promptly upon request.

Third-Party Services

Stripe

We use Stripe to process payments. When you complete a purchase, your payment details are transmitted directly to Stripe and governed by Stripe's Privacy Policy. We receive only a payment confirmation and customer ID.

Spam and abuse protection

Our contact form and guest submission forms use Altcha, an open-source proof-of-work spam protection tool, and a honeypot field to prevent automated abuse. Altcha runs entirely within your browser. No personal data is transmitted to Altcha or any third-party server as part of this process.

We do not use third-party analytics, advertising networks, or social media tracking pixels.

How We Store Your Data

Your data is stored on servers we control. Guest-uploaded photos, videos, and messages are stored alongside your event and are accessible only to the event host and to anyone who has been given the event's private QR code link.

Data Retention

Account data is retained for as long as your account is active
Event data and guest submissions are retained for the duration of the event plus 30 days, after which they may be deleted
Newsletter subscriber email addresses are retained until you request removal
You may request deletion of your account and associated data at any time (see "Your Rights" below)

Cookies

We use only essential session cookies required to keep you logged in. We do not use tracking or advertising cookies. You can disable cookies in your browser settings, but doing so will prevent you from logging in to your account.

Your Rights (GDPR)

If you are located in the European Economic Area, you have the following rights regarding your personal data:

Access: request a copy of the data we hold about you
Rectification: request correction of inaccurate data
Erasure: request deletion of your data ("right to be forgotten")
Portability: request your data in a portable format
Restriction: request that we limit how we process your data
Objection: object to processing based on legitimate interests
Withdraw consent: where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, contact us at admin@forgetmenots.site. You also have the right to lodge a complaint with your local data protection authority.

Children's Privacy

Our platform is not directed to children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

Changes to This Policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the platform after changes constitutes acceptance of the updated policy.

Contact Us

FORGETMENOTS, LLC
Michigan, United States
Email: admin@forgetmenots.site
Phone: 586-942-5180