Privacy Policy

Bouquets you share. When you send a bouquet we store what you put in it: the flowers, wrapping, background and charms, and the message, signature and gift tag you write. Anyone who has the link can open it, so write only what you are happy for the recipient, and anyone they forward it to, to read.

Photos you add. Adding photos needs an account. If you add photos to a bouquet, we store them so the people you send it to can see them. Before storing a photo we shrink it and save it again, which removes its camera data, including any location. Photos can be seen by anyone who has the bouquet's link, are kept out of search engines and link previews, and are deleted when the link expires, or within two days if the bouquet is never sent. To have one removed sooner, email hello@flower4u.garden with the bouquet's link. To limit abuse, each photo is linked to the account that added it.

Reports. If you report a bouquet, we keep the reason you chose, anything you wrote, and a scrambled (hashed) form of your IP address so one person cannot report the same bouquet over and over. The address itself is not stored.

Your account, if you make one. Your email address, your username, and your password (stored only in scrambled, hashed form by our sign-in provider). If you sign in with Google, Google shares your name, email address and profile picture with us. We also keep the list of bouquets in your garden: the ones you sent while signed in and the ones you added.

Stories you send us. If you send a story from the contact page, we keep your name, email address and the story. We may publish the story only if you ticked the box allowing it. Your email address is never published; we use it only to reply to you.

Technical information. Like most websites, our hosting providers record basic request details, such as IP address, browser type and the time of a visit, to run the site and keep it secure. We also count page visits with Vercel Web Analytics, which uses no cookies and reports visits in aggregate: which pages are viewed, roughly where visitors are and what devices they use. It never records the address of a particular bouquet or anything written in one.

Advertising measurement, with your permission. If you allow advertising cookies, see below.

• To show your bouquet to the people you send it to.
• To run your account and your garden.
• To reply to messages and stories you send us.
• To keep the site secure and working, and to fix problems.
• To show ads, which keep Flower4u free, and, if you allow it, to measure how our own ads on Instagram and Facebook perform.

We do not sell your personal information.

Essential (always on). These make the site work and cannot be switched off:

• Sign-in cookies from Supabase, which keep you signed in.
• A short-lived cookie (f4u_next, 30 minutes) that remembers which page to return you to after signing in.
• Items saved in your browser's storage: your cookie choice, whether you have unlocked all flowers (for 24 hours), and whether you have seen the builder's tips.

Advertising (only if you choose “Accept all”).

• Meta Pixel (Meta Platforms): tells Meta which of our pages you visited, so we can measure our ads on Instagram and Facebook. It never runs on the page where someone opens a bouquet, because those pages hold private messages.
• Google AdSense and Google Ad Manager: show ads, including the short video you can choose to watch to unlock all flowers, and may personalise them using cookies.

If you choose “Essential only”, the Meta Pixel stays off and we ask Google for non-personalised ads. Google may still use cookies for things like limiting how often you see an ad and preventing fraud. Visitors in the European Economic Area, the UK and Switzerland may also be asked for consent by Google directly.

Change your cookie choice at any time; the same link is in the footer of every page.

We use these services to run Flower4u. Each handles data under its own privacy policy.

• Vercel: hosts the website and counts page visits (Vercel Web Analytics, without cookies).
• Supabase: stores bouquets, accounts, gardens and stories, and handles sign-in.
• Google: fonts (loading them sends your IP address to Google), sign-in with Google, and ads (AdSense and Ad Manager).
• Meta: the Meta Pixel, only with your permission.
• Amazon: gift idea pictures are loaded from Amazon, and gift links go to Amazon. If you follow one, Amazon may set cookies so the purchase is credited to us. As an Amazon Associate we earn from qualifying purchases.
• Buy Me a Coffee: only if you follow our link to leave a tip.

These providers may store and process data on servers outside your country, including outside India. We may also disclose information if the law requires it.

• Bouquets sent without an account are deleted 30 days after they are made, and their links stop working.
• Bouquets kept in a garden (sent while signed in, or added by the recipient) do not expire. Removing one from your garden does not delete the bouquet, because the other person may still have it.
• Account details are kept until you ask us to delete your account.
• Stories are kept until we have finished with them, or until you ask us to remove one.
• Hosting providers keep request logs for a limited time under their own policies.

You can ask us for a copy of your information, ask us to correct it, or ask us to delete it, including your whole account. Email hello@flower4u.garden from the address on your account and we will respond within 30 days. You can change your cookie choice at any time, as described above.

Depending on where you live, laws such as India's Digital Personal Data Protection Act or the GDPR may give you further rights, including the right to complain to a data protection authority.

Flower4u is not meant for children under 13. If you are under 18, please use it with the permission of a parent or guardian. If you believe a child has given us personal information, contact us and we will delete it.

The site is served over HTTPS, and your account data is protected so that each person can reach only their own garden and profile. No system is perfectly secure, but we work to protect what you share with us.

If we change this policy we will update the date at the top. For significant changes we will make it clear on the site.

Questions or requests: hello@flower4u.garden