Privacy
Last updated: 2026-08-01
We collect as little as we can get away with. No advertising trackers, no data selling, no profiles. Here is exactly what Lamsa stores and for how long.
What we store
Only what the product needs to work:
- The content of your page: the words you wrote, the photos you uploaded, the colours, the music choice and the lock you set.
- Your email address, if you chose to give one — used to send your secret edit link, your receipt and an expiry reminder. Nothing else.
- A two-letter country code, so we can show prices in the right currency.
- A counter of how many times your page was opened (a number, not a list of visitors).
- Abuse reports: the reason, any details written, and the reporter's email if they left one.
What we never store
Card details. Checkout is handled by our payment provider — Creem, with Polar as a backup — and they process the card. We only ever receive a confirmation that the payment succeeded. We never see or store card numbers.
We do not use advertising or analytics trackers on your pages, and we never sell or share your content with anybody.
Cookies
Two small cookies, both strictly functional: lang remembers which language you chose, and cc remembers your country code so we can show the right price. No advertising cookies, no third-party tracking.
How long we keep it
Deletion is automatic — a daily job enforces these periods:
- Unpaid drafts: deleted 48 hours after they were created, including any photos already uploaded.
- Paid pages: kept until the page expires, then for 30 more days so you can renew it, and then deleted.
- Pages you delete yourself, or that we remove after a report: purged within 7 days, including every stored photo.
- Abuse reports: kept for 12 months so we can spot repeat offenders.
- Payment records: kept as long as tax and accounting law requires.
Who processes data for us
A short list of sub-processors, all under data-processing agreements:
- Vercel — hosting the app and serving the pages.
- Cloudflare — storing and delivering photos (R2), plus bot protection.
- Resend — sending the few emails we send (edit link, receipt, reminders).
- Creem and Polar — payments and card processing.
Your rights (EU/GDPR and elsewhere)
Email hello@send.lamsa.page and we will act within 30 days: a copy of everything we hold about you, a correction, or complete deletion. You can also object to processing or ask us to restrict it.
Our legal bases: performing the contract with you (hosting the page you paid for), your consent (an email address you chose to give), and our legitimate interest in keeping the service safe (abuse reports and rate limits).
If you are in the EU, you also have the right to complain to your local data protection authority.
Children
The service is not intended for anyone under 16. If you believe a child has used it, email us and we will delete the page.
Contact
Privacy questions and data requests: hello@send.lamsa.page. Reporting a page: abuse@example.com.
Questions? Email hello@send.lamsa.page