Privacy policy
Last updated 2026-10-20. Contact: hello@lovestoryspace.com
What we collect
- Account: your email address (for passwordless sign-in codes) and the session needed to keep you signed in.
- Your pages: the names, texts, dates, colours, flower and sections you add, and the photos and voice messages you upload, so we can show your page. Photos are resized in your browser before upload, which also removes their location data; uploaded files get unguessable addresses.
- Answers on love pages: when the person you wrote to answers the big question, uses a coupon, finishes the quiz, writes back or sends kisses, we save that answer for you. We don't ask for their name or email.
- Replies to invitations: when a guest answers an invitation they write their name, whether they come, how many they are and, if they want, a note (such as an allergy). We save it for the person who made the invitation, who sees it in “My pages” and gets an email about each reply. Guests don't need an account.
- Payments: handled by Stripe. We never see or store card details. For each payment we keep proof of it for disputes (see below).
Payments and disputes
For each payment we keep, for up to 18 months (the longest a card network accepts a dispute), what Stripe tells us about it (how it was authorised, such as Apple Pay or a 3D Secure check, the card brand, the last four digits and the country that issued it, and Stripe's risk assessment) and what we saw at checkout: your IP address, browser, country, the time you accepted these terms and the pages you visited. We use it only to answer a dispute or a refund request, to prevent fraud and to meet our accounting duties.
Analytics
For every page view we record the page, the website or campaign that sent you (referrer, UTM parameters and ad click ids), approximate location (country, region, city from your IP), device type, operating system, browser, browser language and time zone. We do not store your IP address: we keep a one-way hash of it mixed with a secret that changes every day, which lets us count daily unique visitors without recognising you on another day. The one exception is a payment, where we keep the IP address as described above.
In the editors we also record which publishing steps you reach (pressing publish, the order summary, signing in, the payment form, paying, closing one of them), with the same daily hash and visitor id, to see where making a page gets stuck.
On love pages we only count views so the page owner can see how many times their page was opened.
Visitor id and device fingerprint
We set a first-party cookie (lss_vid) with a random visitor id and compute a browser fingerprint (screen, hardware, fonts, graphics and canvas characteristics). We use them to recognise your device across visits, attribute sign-ups to the campaigns that brought you and improve our advertising. You can delete the cookie at any time from your browser settings.
Attribution
When you sign in, we link your account to how you first found us and to your latest campaign visit (source, campaign, landing page, country, device).
Writing to us
If you email us (support@lovestoryspace.com, hello@lovestoryspace.com or any other address of the site), we keep your message, your address and our replies in our support inbox for up to 24 months, to help you and to remember what we told you. Only we can read it.
One reminder email
If you sign in, open the payment for a page or a book and leave without paying, we send you one email about it, in the language of your page, with the names you wrote and a 10% code. We never send it to someone who has already paid, only once per account, and every email has an unsubscribe link (or ask us and we stop it). We keep a record that it was sent, and the code, while your account exists.
Retention
Page-view records and editor steps are deleted automatically after 13 months. Payment evidence is deleted after 18 months. Support emails are deleted after 24 months. Uploaded files that no page uses are deleted after 7 days. Account data is kept while your account exists; ask us and we delete it.
Processors
- Vercel (hosting, EU/US; uploaded photos and voice messages are stored on Vercel Blob in Frankfurt, EU)
- Neon (database and sign-in, EU region)
- Stripe (payments)
- Amazon Web Services, SES (sending emails: invitation replies and the reminder email)
- YouTube (the song on a love page; the player loads only when the visitor presses play, from youtube-nocookie.com)
- OpenFreeMap and OpenStreetMap Nominatim (map tiles and place search for the map section)
Your rights
You can ask for access, correction, deletion or a copy of your data, or object to processing, by writing to hello@lovestoryspace.com. You can also complain to your data protection authority.