Privacy Policy — Data Protection & Privacy

This Privacy Policy explains how 2luv collects, uses, and shares personal data when you use our website and services (for example, when you create, view, and share a Gift, or when you complete a purchase).

Access and sharing: Gifts are accessed via a link. If you share that link (and especially if there is no password), anyone with the link can view the Gift content and images.

Public/showcase pages display only sample demo letters created by the 2luv team.

"Personal data" refers to information that identifies you directly or that may identify you indirectly when combined with other data (for example, online identifiers and usage data).

Data you provide: information submitted when creating a Gift (for example, name, email, phone number (if provided), and the Gift content, including messages and any media you upload).

Payment data: payments are processed by providers such as Stripe. We generally do not store full card details; we receive what we need to confirm the transaction and unlock access (for example, payment status, currency/amount, and session/order identifiers).

Usage and technical data: we may collect information such as IP address, browser/device type, pages visited, timestamps, error logs, and similar information for security, fraud prevention, and service improvement.

Marketing/attribution identifiers (when permitted): we may record campaign and click parameters (for example, UTM, gclid/fbclid/ttclid/epik) and identifiers associated with cookies/pixels (for example, _fbp/_fbc/_ttp/_epik) to measure performance and attribute conversions.

Service delivery: create, host, render, and make your Gift available, including core product functionality.

Payments and access: process purchases, verify payments, meet accounting/financial obligations, and unlock paid features.

Support and communications: respond to requests, investigate issues, and maintain support records.

Security and fraud prevention: monitor abusive behavior, protect sessions, detect suspicious activity, and maintain platform integrity.

Measurement and marketing (with consent, when applicable): measure campaigns, attribute conversions, and avoid duplicate reporting between client-side and server-side events.

Depending on your location, we may process personal data based on: (i) contract performance (to provide the Gift and paid features), (ii) legal obligations (for example, financial recordkeeping), (iii) legitimate interests (for example, security, fraud prevention, and improving the service, balanced against your rights), and (iv) consent (for example, marketing/analytics cookies and pixels where required).

You can withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

We use cookies and local storage to operate the site and remember preferences.

Essential: used for security, core site operation, and to remember your consent choice (consent cookie).

Optional (configurable in the banner): - Analytics: helps us understand site usage and performance (statistics). - Ads measurement: helps measure campaigns and conversions. - Ad user data: allows sending user data to improve conversion measurement (where applicable). - Ad personalization: allows remarketing/personalized ads.

For Google signals, we use Google Consent Mode v2: optional signals start as denied by default and are only updated after your choice. You can change your consent at any time.

You can delete cookies and local data in your browser settings. Note that some features may rely on them to work correctly.

If you provide consent, we may load advertising measurement technologies such as Google Tag/Ads, Meta Pixel, Pinterest Tag, and TikTok Pixel to record page views and events and understand campaign performance.

In addition to browser-based tracking, we may also send server-side conversion events (for example, after payment confirmation via webhooks) to those platforms for measurement and attribution. These events may include technical and attribution identifiers (for example, click parameters and pixel cookies) and, where applicable, pseudonymized data (for example, hashed email/phone) to improve matching.

We do not sell your personal data. We use these events primarily for measurement and to reduce duplicates (deduplication) between client and server events.

Service providers: we may share data with vendors that help us operate 2luv (for example, hosting/infrastructure, payment processing such as Stripe, and support tools), only as necessary to deliver the service.

Measurement/ads partners (with consent, where applicable): we may share identifiers and conversion events with advertising platforms for measurement and attribution.

Legal and protection: we may disclose data when required by law or to protect rights, safety, and prevent fraud/abuse.

We keep data for as long as needed to fulfill the purposes described in this policy, including legal compliance, dispute resolution, and security.

Some product cookies may last up to 1 year. Financial records may be retained longer where required by law.

You can: (i) manage cookies and withdraw consent in your site/browser settings, (ii) request access, correction, deletion, or portability (where applicable), and (iii) object to or restrict certain processing (where applicable).

To exercise your rights, contact us. You may also have the right to lodge a complaint with a data protection authority, depending on your location.

We apply reasonable technical and organizational measures to protect your data. However, no system is 100% secure; we recommend using trusted devices and networks when accessing 2luv.

Our providers and partners may operate in different countries. Where international transfers occur, we use appropriate safeguards required by applicable law (for example, standard contractual clauses and risk assessments) to protect your information.

2luv is not intended for children. If you believe a child has provided personal data to us, contact us so we can take appropriate action.

We may update this Privacy Policy from time to time. The most recent version will be available on this page, and the effective date will be updated when relevant changes occur.