Legal
Privacy Policy
Last updated: March 4, 2026
Overview
This Privacy Policy explains how openthis.one collects, uses, stores, and shares information when you use the service. openthis.one lets people create temporary surprise pages and share them through custom subdomain links.
Information we collect
- Account information: Your email address and basic profile information from the sign-in method we make available through Clerk, currently Google sign-in.
- Surprise page content: Names, messages, template choices, subdomains, expiry settings, and other information you enter when creating a page.
- Settings and preferences: Your display name and whether you want to receive email notifications when a page is opened.
- Usage data: We record when a page is opened for the first time (`openedAt`) so we can show you that event and optionally notify you by email.
- Technical data: Our infrastructure providers may process technical request data such as IP address, device/browser metadata, and server logs for hosting, security, and reliability.
How we use information
- Authenticate users and secure accounts.
- Create, host, and display surprise pages.
- Check subdomain availability and enforce page limits.
- Record first-open events and, if enabled, send notification emails.
- Operate, maintain, troubleshoot, and improve the service.
- Prevent abuse, enforce our terms, and comply with legal obligations.
Public links and recipients
Surprise pages are designed to be viewed by anyone with the link. We do not require a recipient account to open a page.
Because the link itself grants access, you should avoid putting highly sensitive, confidential, or regulated personal information into a surprise page.
How we share information
We do not sell personal information or use it for targeted advertising. We share information only as needed to operate the service, comply with law, or protect the service and its users.
Cookies and similar technologies
We use cookies and similar technologies mainly for authentication, session management, security, and core app functionality. We do not currently use advertising cookies.
Data retention
Surprise pages remain available until they expire or are deleted. Account-level information remains until you delete your account or we no longer need the data for the purposes described in this policy.
We may retain limited information for a reasonable period where necessary for legal compliance, fraud prevention, dispute resolution, enforcement of our agreements, or backup and disaster recovery processes.
Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information. In this app, you can already:
- Update your display name and notification settings in the app.
- Delete individual surprise pages from your dashboard.
- Delete your account from Settings, which also removes your associated pages.
- Contact us to request access, correction, or deletion where applicable law gives you that right.
Children's privacy
openthis.one is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us so we can review and remove it if appropriate.
International processing
Your information may be processed in countries where our service providers operate. By using the service, you understand that your information may be transferred to and processed outside your home jurisdiction, subject to applicable safeguards where required.
Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the date at the top of this page and may provide additional notice where appropriate.
Contact
Questions or privacy requests can be sent to support@openthis.one. You can also manage or delete much of your information directly from Settings.