Privacy
Names and privacy
An entry records a date, a minute and its number. Whether a name goes with it in public is its registrant's choice, and theirs to change.
What the registry shows
Every entry shows its date, its minute and its number within the day. A name and a line of message are shown only if the registrant chose to show them when claiming, and only once a person has reviewed them. Unless that choice is made, the entry says Name withheld.
The certificate
The certificate that carries a withheld name goes to its registrant alone. The public certificate, the one a shared link previews, carries no name.
Changing your mind
The receipt for every entry carries a private link. From it, a registrant can hide their name and message at any time, and they leave the site at once.
What cannot be recalled
When a name is removed, the entry page and its certificate change at once. Copies of a link preview that messaging apps and social networks made before then are held by them; we cannot reach those.
Ask us
If your name appears on an entry you did not agree to, or you claimed an entry and no longer have its private link, or you have a question about your data, write here. A person reviews every request and acts on it within 2 days.
What is kept, and for how long
An entry
Its date, its minute and its number within the day, the name and message given for it, the choices made for its certificate, and for a gift who it is from, for as long as the entry is in the registry. Who a gift is from is printed on its card alone, which only the buyer's private pages show, and never on the entry. The home page's strip of recent entries shows the minute of every entry, and the name only of one whose registrant chose to show it and a person approved.
Your email address and the payment
The address Paddle passes on when you pay, and the payment's reference, kept with the entry for as long as it exists: to send the receipt, to make a refund, and to answer a dispute.
A yearly note, if you ask for one
If you tick the box on the review step, one short email each year on the date of your minute, to the address Paddle passed on. It carries a link to the entry and to your private page, where you turn it off. It is sent to the buyer alone, never to the person a gift is for, and it stops the moment you turn it off.
A checkout never finished
A minute is held for 15 minutes while you pay. If the payment never comes, what was typed for it is erased 30 days after the hold ends.
A privacy request
What you write through this page, and the address to answer you at, deleted 12 months after it arrives, once it has been answered.
Repeated attempts
So that a script cannot hold every minute of a day, claims and requests are counted per visitor for an hour. What is kept is a keyed fingerprint of the visitor's address, never the address, and it is deleted within 24 hours.
Visits
Pages viewed are counted by Vercel Web Analytics, which sets no cookie and keeps no address. For each view it records the page, the country, the kind of device and browser, and the site that sent you, never who you are. A private link, like the one in a receipt, is counted without its key.
Your browser
The site sets no cookie. It keeps two things in your browser: whether you chose the light or the dark look, and whether you closed its suggestion to read a page in another language, or chose a language yourself, so that it does not suggest one again. Paddle's checkout, which opens only when you pay, is run by Paddle, under Paddle's privacy policy.
Who handles it for us
Paddle
Takes the payment, as the seller of record for the charge on your statement, under Paddle's privacy policy. It passes on your email address and the payment's reference, never your card.
Vercel
Hosts the site, and counts its visits.
Neon
Holds the registry's database.
Resend
Sends the receipt, and the notices the registry sends to us.
Cloudflare
Receives the email sent to minutestamp.com addresses, and passes it on to us.
Each of these services may keep what it handles outside Canada, in the United States in particular.