Privacy policy
Last updated 4 October 2026
This page explains what we collect, why, and how long we keep it. We keep it as simple as we can.
Data controller
Locket Song
[Street address]
[Postal code] [City]
Denmark
CVR [CVR number]
VAT [VAT number, e.g. DK12345678]
locketsong@proton.me
Locket Song is the data controller for the personal data we collect when you use this site.
What we collect
- The answers you give in the questionnaire. These describe another person — the recipient — and may include personal memories.
- Your name (as the sender) and your email address.
- Payment details, which are handled by Stripe. We never see your card number.
- Your time zone, so we can deliver the song at the time you chose.
- Technical data needed to run the site, such as the information your browser sends to load a page.
Please only share what you are comfortable with. Avoid sharing sensitive information such as health details.
Why we use it, and on what legal basis
- To create and deliver your order — this is necessary to perform the contract.
- To keep accounting records — this is a legal obligation under Danish bookkeeping law.
- To prevent abuse and keep the service safe — this is our legitimate interest.
Who we share data with
| Who | What they do | Where |
|---|---|---|
| Supabase | Database and private file storage | EU |
| Stripe | Payments. We never see your card number. | Ireland / USA |
| Anthropic | Writes the lyrics from your answers | USA |
| WaveSpeed / Mureka | Creates the music from the lyrics | Singapore / Hong Kong |
| Resend | Sends order and delivery emails | USA |
| Vercel | Hosts this website | USA / EU |
Some of these companies are outside the EU. When we transfer data outside the EU, we use appropriate safeguards, such as the EU Standard Contractual Clauses.
How long we keep data
- Unfinished questionnaires are deleted after 30 days.
- Songs, lyrics and your answers are kept for 2 years after delivery so the private link keeps working, unless you ask us to delete them earlier.
- Payment and accounting records are kept for 5 years from payment, as required by Danish bookkeeping law.
Your rights
You can ask us for access to your data, to correct it, to delete it, to restrict how we use it, to object to certain uses, or to receive a copy you can take elsewhere (data portability). Write to locketsong@proton.me and we will help.
You also have the right to complain to Datatilsynet, the Danish Data Protection Agency. datatilsynet.dk.
Cookies and local storage
We only use what is strictly necessary: remembering your questionnaire progress and whether sound is on. We do not use tracking or advertising cookies.
Security
Songs are stored privately. Listening links are private. Connections to the site are encrypted.
Changes to this policy
If we change this policy, we will update the date at the top of this page. For important changes, we will also say so on the site.