Privacy notice
Create something thoughtful. Keep control of your information.
You do not need an account to create or download a greeting. Your editor choices stay in page memory; rendering an image sends the selected design and optional recipient name to our server for temporary processing. Opening the sharing options also saves a reusable design without the recipient’s name, accessible to anyone with its link for 30 days. Optional usage statistics, including Google Analytics, start only after you allow them. You can reject or withdraw without losing the free editor. Advertising networks and paid checkout are not active.
Assistant connectors and MCP
You may ask a compatible assistant such as ChatGPT or Claude to create a greeting using our public MCP service. Your assistant sends the tool inputs needed for the request: language, occasion, optional first name, style and image choices. We do not request your conversation history, account credentials, contacts or private files. Your assistant provider separately processes your conversation under its own terms and privacy policy.
Names are processed temporarily to write the greeting or render the image returned to your assistant. They are not included in our stored design records or web links. Creating a card also creates a reusable design without the name, accessible to anyone with its unguessable link for 30 days. The image shown in the conversation can contain the name; the reusable link and its image do not. Only share the image with people you intend to receive it.
To operate and protect the service, we count tool outcomes by day and declared client category (ChatGPT, Claude or other MCP), without saving names, prompts, chat history or per-user identifiers in these counters. Counters are retained for up to 90 days, with routine cleanup on service activity. Our legitimate interest is understanding service reliability and demand using limited aggregate data. Technical security and hosting data follow the safeguards and retention described below. The connector sets no analytics or advertising cookies. If you open the website, optional website analytics depend on your cookie choice there; standard campaign tags identify the source category and occasion without including a name.
The connector cannot send a WhatsApp message, post to social networks, buy anything or read the administration dashboard. Image generation remains a free, requested service with our watermark.
1. Who is responsible
The operator below is the controller of the personal data processed through Generate Greetings at generategreetings.com. This notice concerns the public greeting service, its support and its administration.
Tommaso SavoranaVia Marco d'Agrate 34C 20139 Milano Italy
info@generategreetings.com
Contact us through the support form
2. Information, purposes and legal bases
| Information | What we do with it | Legal basis under the GDPR |
|---|---|---|
| Optional recipient name; language, occasion, wording and visual choices | Generate the greeting and render the preview or downloadable image you request. Card rendering sends the name and selected design to our server. Personalised card content is processed temporarily; recipient names are not saved in our application database. The separate, optional shared-design feature is described below. | Performance of the free service you request (Article 6(1)(b)). For a recipient’s name supplied by someone else, our legitimate interest in providing the requested personal greeting, limited to that purpose (Article 6(1)(f)). |
| Optional shared design: phrase selection, language, occasion, visual choices, random link identifier and creation/expiry times. The recipient’s name is removed. | Provide a reusable greeting link. Anyone with the link can open the design and create their own version for 30 days. It is not password protected. Opening the sharing options prepares the record even if you later cancel; preparing a link does not send a message. | Performance of the sharing feature you request (Article 6(1)(b)); legitimate interests in delivering and protecting it where applicable (Article 6(1)(f)). Optional usage measurement requires separate statistics consent (Article 6(1)(a)). |
| Connection information, including IP address, request time, requested resource and browser technical information | Deliver pages and images, protect the service and investigate failures or abuse. Our application rate limiter uses a short-lived hash of IP address, time window and endpoint; this is pseudonymous, not anonymous. | Legitimate interests in a secure, available service (Article 6(1)(f)); legal obligations where applicable (Article 6(1)(c)). |
| Browser privacy choice, random consent receipt identifier, notice version and decision/expiry times | Apply and demonstrate your choice, including refusal or withdrawal. Consent receipts do not contain your name, email, IP address or browsing history. | Meeting consent and accountability obligations (Article 6(1)(c)); legitimate interests in recording and defending compliance (Article 6(1)(f)). The preference cookie is necessary to remember your choice. |
| Optional first-party counts of page views, generated greetings, downloads, shares, and sponsor impressions/clicks | Understand service use. If enabled by the operator, these counts start only after you opt in. We store daily event totals and short-lived random event identifiers to avoid double counting. We do not join these counts to your name or consent receipt, or create an advertising profile. | Your consent (Article 6(1)(a)). Rejecting or withdrawing does not prevent free card creation or download. |
| Optional Google Analytics data: pseudonymous browser/session identifiers, mapped page paths, event times, language, device/browser information, interactions and predefined traffic-source/campaign categories | Understand how consenting visitors use the service. Google Analytics can recognise a browser across visits using first-party cookies. Events describe page views, greeting generation, downloads, sharing and sponsor interactions. After statistics consent, recognised campaign values or referring website hosts are converted into predefined categories such as Google, TikTok, Pinterest, WhatsApp, shared link, occasion and content type. Other values are ignored. The application does not send raw referrer URLs, query strings, search terms, greeting text, recipient names, images or unique shared-link identifiers as Analytics fields. Shared-design views use the generic path /shared-greeting. Page URLs exclude query strings and fragments. Event attributes are limited to predefined language, occasion, format and sharing-method choices. Google also receives connection information, including the IP address needed to receive the request. This is pseudonymous analytics, not anonymous processing. | Your consent (Article 6(1)(a)). Google Analytics does not load before a valid statistics choice is verified. Refusal does not prevent free card creation or download. |
| Information you send when contacting us, and administrative access information | Answer requests, handle rights or content complaints, and restrict administrative controls to the authorised operator. | Legitimate interests in responding and protecting the service; performance of a requested service or legal obligations where relevant (Articles 6(1)(f), (b) or (c)). |
The recipient name is optional: a nickname or first name is enough. Do not enter health information, identity documents, financial information or other sensitive personal data. We use a combinatorial phrase library; creating a card does not require a visitor account or a prompt to an external AI generation service.
3. What stays in your browser
The browser remembers recent background choices for the current tab session and stores a necessary cookie after you save a privacy choice. Greeting choices and image previews also exist temporarily in page memory. See the Cookie & browser storage notice for names, lifetimes and controls.
A choice applies to this browser on this device, not all your devices. Clearing storage, using private browsing or changing browser can remove it. We do not fingerprint you to reconstruct a lost choice. If we cannot verify a valid choice, optional statistics remain off.
When you allow statistics and Google Analytics is enabled, your browser also stores the analytics cookies listed in our Cookie & browser storage notice. These are separate from the cookie that remembers your privacy choice.
4. Recipients and service providers
Hosting: the site uses OpenAI’s ChatGPT Sites hosting. Under the Sites Data Processing Addendum, OpenAI processes Hosted Data for the publisher. Hosting providers process connection and operational information needed to deliver and protect the site. Infrastructure and domain services may include Cloudflare. Purchasing a Cloudflare domain does not enable Google Analytics or an advertising network.
Site administration: the authorised operator can access settings and aggregate usage statistics. Administration uses ChatGPT authentication; public card creation does not. OpenAI also applies its own privacy terms to its account services.
Sharing and external links: Anyone with a shared-design link can open the name-free design while it is active. Search engines are asked not to index these pages, but this does not make them private or prevent copying or forwarding. WhatsApp and destinations you choose from your device’s share sheet receive the content you choose to send or open. Images and greeting text shared directly can include the recipient name, even though the reusable design link does not. You may need to attach the downloaded image separately in WhatsApp. Opening a share sheet or WhatsApp does not establish delivery. External platforms apply their own terms and privacy policies. Photo-credit and sponsor links also open external sites when followed. Editor images and fonts are served from this site.
Optional Google Analytics: Google Ireland Limited provides our Google Analytics service and processes measurement data on our behalf under the Google Ads Data Processing Terms. Google and its subprocessors receive the analytics data described above. Our tag does not grant permission for advertising storage, advertising use of user data or personalised advertising. Read how Google uses information from sites or apps that use its services.
Advertising and payments: no AdSense, other advertising-network SDK or Stripe checkout is loaded for visitors in this release. Direct sponsor links, if enabled after the operator information is complete, are labelled and use locally hosted creative images. They do not provide advertisers with a profile of you. Optional interaction counts follow your statistics choice.
We may disclose relevant information where required by law or necessary and proportionate to protect legal rights, security or people. We do not sell recipient names or greeting content.
Support form: when email delivery is configured, the email address you provide, optional name, selected topic and message are transmitted securely to our support mailbox through Resend. The destination address is kept in server configuration and is not shown on the form. We do not store message contents in our application database or analytics. Resend and the receiving email provider process the message to deliver it; replies and correspondence remain in the support mailbox for the time needed to handle the request. If delivery is not configured, the form reports that it is temporarily unavailable. Please do not submit passwords, payment details or sensitive documents.
5. International processing
Hosting and connected services can process information outside Italy or the European Economic Area. We do not represent that all data stays in the EU. For transfers of Hosted Data, the Sites DPA provides for applicable adequacy decisions or Standard Contractual Clauses and related safeguards. Further information appears in the provider’s subprocessor list. You may request information about applicable safeguards using the controller’s published contact details.
Google Analytics information may also be processed outside the EEA, including in the United States. Google describes its reliance on applicable adequacy decisions, including the EU–US Data Privacy Framework for Google LLC and covered US subsidiaries, and on Standard Contractual Clauses where required. See Google’s data transfer safeguards. You may contact us about the safeguards relevant to our service.
6. Retention
- Personalised free greetings and recipient names: recipient names are not saved in the application database; processed for rendering and held temporarily in page/server memory. A file you download or share is controlled by you and the chosen destination.
- Optional shared designs: a name-free design remains accessible for 30 days from creation. After expiry the application stops serving it, and the database record is eligible for removal during subsequent service cleanup. This does not promise immediate deletion from hosting logs or backups. Copies or messages already saved by other people or platforms are not removed when the link expires.
- Privacy cookie: 184 days from your decision, unless you replace or clear it earlier. Reading the cookie does not renew it. Consent evidence in our database is eligible for deletion after 365 days from the recorded decision, including superseded receipts.
- Rate-limit records: normally expire after about two minutes; support-form abuse controls use windows up to 24 hours. Expired records are removed during routine cleanup. Random event-deduplication keys are eligible for deletion after two days. Daily statistics and any older generation records are eligible for deletion after 90 days.
- Google Analytics cookies: configured for up to 184 days from initial creation, without extending expiry simply because you return. Your browser may expire them earlier. Cookie lifetimes are separate from Google’s server-side retention.
- Google Analytics records: user-level and event-level records follow the property’s retention setting and Google’s deletion processes. Standard aggregated reports are not subject to that same retention setting. Our own counters’ 90-day schedule does not apply to Google Analytics. See Google’s explanation of Analytics retention, or contact us for the current property setting.
- Cleanup: the application runs cleanup during subsequent service activity, at most once an hour per running worker. Expired records are ignored for permission checks even before physical cleanup. We do not claim immediate deletion from infrastructure logs or backups controlled by hosting retention processes.
- Support and legal matters: keep only what is needed to respond and resolve the matter, or for an applicable legal retention requirement or legal claim. Provider operational/security logs follow the relevant hosting arrangements rather than the application counters’ schedule.
7. Your choices and rights
You can accept or reject optional statistics, and change or withdraw your choice through at any time. Withdrawal applies going forward and does not affect the lawfulness of processing before withdrawal. Previously aggregated internal totals cannot normally be linked back to you. Withdrawal stops future Google Analytics collection in this browser and removes the analytics cookies this site can access; it does not automatically erase data already sent to Google. You can contact us about an applicable deletion request. Google also offers an Analytics opt-out browser add-on for supported browsers. This extension is not required to reject analytics through our settings.
Where applicable, you may request access, correction, erasure, restriction or portability of your personal data; object to processing based on legitimate interests; and withdraw consent. Contact the controller above with enough information to understand the request. We normally respond within one month; if a lawful extension is necessary, we will explain it. We may ask for proportionate verification when needed, but do not need an identity document by default.
Because you do not need an account, we may be unable to identify data belonging to you. We will explain this and consider any relevant information you voluntarily provide; we do not collect extra identity information solely to make you identifiable. You may complain to the Italian Garante per la protezione dei dati personali or your competent data protection authority.
To request review or removal of a shared design before expiry, contact us with its link and a brief explanation. No account is needed. Removing a link does not remove copies already downloaded, forwarded or held by another platform. Do not send identity documents or sensitive details unless we explain why they are needed.
8. Children, security and changes
This service is intended for adults creating greetings for friends and family, rather than a service directed to children. Do not submit personal information about a child beyond what is appropriate and necessary for a greeting. A parent or guardian can contact the controller about a concern.
We use HTTPS, restricted administration, validation, request limits and consent checks on the server as well as in the browser. No internet service can guarantee absolute security. We do not use these service statistics for automated decisions producing legal or similarly significant effects.
We will update the date and version when practices change. New optional purposes or material consent changes will be explained before they are enabled, with a new choice where required. English is the current master notice; the short privacy controls are available in the editor’s fifteen languages.