Privacy & your data

A link is the invitation

Requests are unlisted. Anyone with the friend link can read the request, votes, names and reasons, and can forward the link. Search engines are asked not to index requests. This is not a password-protected vault. Keep bank details, addresses and other sensitive information out of the form.

The requester link also grants control of the file, including deletion. Keep it to yourself. If you hide the price, friends and receipt images do not receive it; the requester desk still shows it to you.

What is stored

We store the details you submit, optional image links, votes and display names, and the outcome you record. The automatic first take uses fixed rules. It does not send your form to an AI service.

Essential cookies remember requester access and whether this browser has voted. They can last up to 400 days, subject to your browser settings. Clearing them removes that browser’s access; save your requester link first.

Hosting and basic usage counts

Vercel hosts the website and Supabase stores its data in the United States. These providers process technical information such as IP addresses and server logs to operate the service. Optional external image links contact the image host when loaded.

We record basic actions such as starting a form, copying a link, voting and recording an outcome. These events do not copy your form text and are removed after 30 days. Write limits use a hashed identifier derived from your IP; expired limit records are cleaned daily.

Optional analytics

If you choose “Allow analytics,” we use Google Analytics to measure visits and Microsoft Clarity for interaction metrics, heatmaps and session replays on our home, demo and privacy pages. These services receive technical information such as your IP address and browser details and may use analytics cookies. Advertising storage and personalization are disabled. Clarity uses strict text masking.

Neither service loads on the purchase form or private request pages. We remove query strings and fragments from the page URLs sent to Google Analytics and send only the origin of referring URLs. Clarity does not load on visits with query parameters. Your form text, votes, requester links and private file contents are not sent to these analytics services.

Analytics is off until you opt in. You can reject it or change your choice using “Analytics preferences” below any public page. Rejecting removes this site’s analytics cookies and stops collection on that page; it does not erase data already received by the providers. Your preference is saved in this browser. The site’s essential features work regardless of your choice.

Read Google’s Privacy Policy and the Microsoft Privacy Statement for their data handling and retention practices. Our 30-day deletion rule for basic usage events does not apply to these providers.

Delete a file

Open your requester link and choose “Delete this request.” This removes the request, its votes and related events from the active database. Requests otherwise remain available. Copies that someone downloaded or shared, and temporary provider logs and backups, are not removed by this action.

There is no account or email recovery. If you lose both the requester link and its browser cookie, you cannot recover the desk yourself.

Contact

For feedback or questions about your data, email support@bhalgo.com. Include the friend link or form number if relevant. Do not send your requester link.