Skip to content
The most personal gift you can give · Delivered by email
Locket Song

Privacy policy

Last updated 4 October 2026

This page explains what we collect, why, and how long we keep it. We keep it as simple as we can.

Data controller

Locket Song

[Street address]

[Postal code] [City]

Denmark

CVR [CVR number]

VAT [VAT number, e.g. DK12345678]

locketsong@proton.me

Locket Song is the data controller for the personal data we collect when you use this site.

What we collect

  • The answers you give in the questionnaire. These describe another person — the recipient — and may include personal memories.
  • Your name (as the sender) and your email address.
  • Payment details, which are handled by Stripe. We never see your card number.
  • Your time zone, so we can deliver the song at the time you chose.
  • Technical data needed to run the site, such as the information your browser sends to load a page.

Please only share what you are comfortable with. Avoid sharing sensitive information such as health details.

Why we use it, and on what legal basis

  • To create and deliver your order — this is necessary to perform the contract.
  • To keep accounting records — this is a legal obligation under Danish bookkeeping law.
  • To prevent abuse and keep the service safe — this is our legitimate interest.

Who we share data with

WhoWhat they doWhere
SupabaseDatabase and private file storageEU
StripePayments. We never see your card number.Ireland / USA
AnthropicWrites the lyrics from your answersUSA
WaveSpeed / MurekaCreates the music from the lyricsSingapore / Hong Kong
ResendSends order and delivery emailsUSA
VercelHosts this websiteUSA / EU

Some of these companies are outside the EU. When we transfer data outside the EU, we use appropriate safeguards, such as the EU Standard Contractual Clauses.

How long we keep data

  • Unfinished questionnaires are deleted after 30 days.
  • Songs, lyrics and your answers are kept for 2 years after delivery so the private link keeps working, unless you ask us to delete them earlier.
  • Payment and accounting records are kept for 5 years from payment, as required by Danish bookkeeping law.

Your rights

You can ask us for access to your data, to correct it, to delete it, to restrict how we use it, to object to certain uses, or to receive a copy you can take elsewhere (data portability). Write to locketsong@proton.me and we will help.

You also have the right to complain to Datatilsynet, the Danish Data Protection Agency. datatilsynet.dk.

Cookies and local storage

We only use what is strictly necessary: remembering your questionnaire progress and whether sound is on. We do not use tracking or advertising cookies.

Security

Songs are stored privately. Listening links are private. Connections to the site are encrypted.

Changes to this policy

If we change this policy, we will update the date at the top of this page. For important changes, we will also say so on the site.