Privacy notice

Last updated: 6. Oktober 2026

This notice explains what data we process when you visit lovepages.app, order a page or are shown on a page. Questions at any time to hello@lovepages.app.

1. Who we are

HP Capital GmbH
Mayrwiesstraße 11, 5300 Hallwang, Austria
Company register (Firmenbuch): FN 631120 v, Landesgericht Salzburg
Management: Paul Hagler, Philipp Habring
Email for data protection matters: hello@lovepages.app

We have not appointed a data protection officer because we are not required to.

2. The key points in brief

• Without your consent we do not set any cookies, do not use any analytics or advertising services and send nothing to Meta. Only if you choose “Accept” in the notice window (it appears only when we are currently using ad measurement) do we load the Meta Pixel and report your purchase to Meta – with your IP address and with a checksum of your email address and country (section 4.1). Customer pages never have a pixel.
• A lovepage can only be reached through a long link that cannot be guessed, and it is blocked for search engines. Anyone who has the link can see the page. There is no password. If you connect your page to your own domain, it can also be reached at that domain (section 5.6).
• Your text details are sent to a language model that writes the texts of the page – already for the preview, before you pay. Your names, your photos and your email address are not sent. The service also operates in the USA.
• If you do not pay, we delete your draft with all photos and texts 7 days after your last change, no later than 8 days after it. While purchases are not yet possible on our site, it is 1 day instead of 7.
• Every page has a fixed online period (3, 6 or 12 months). After that it goes offline and is deleted 30 days after the end; until then you can still extend it. You can delete it yourself at any time.
• You are shown on a page and do not want that? With “Remove this page” you take it offline immediately – without giving a reason. After 7 days everything is deleted. More in section 8.

3. Who is responsible for what

• Your page belongs to you. You decide which photos and details go on the page, who it is for, how long it stays online and who gets the link. We store and display the page on your behalf as a technical service provider (Terms of Use, section 14). We do not use the content for anything else – not for advertising, not as an example, not for analysis and not to train an AI.
• We are responsible ourselves for everything to do with the order and operation: your email address, payment and consent records, reports, messages to us, logs, security.
• Whoever is responsible for what: you can contact us about any concern – even if you did not place an order but are shown on a page.

4. Visiting the website

When you open a page on lovepages.app, our server processes technically necessary data:

• Access log: IP address, time, address requested (without the part after the question mark and without the secret code of a lovepage), response status, amount of data. We do not store your browser’s headers or the domain name requested. Retention: 14 days.
• Protection against mass requests: Your IP address (for IPv6, the network range) is counted in memory for 10 minutes and is not written to disk.
• Counting steps: On our server we count how often certain steps are reached – for example “preview viewed” or “purchased”. This also includes steps before a draft exists: that an occasion was chosen on the start page and that a step of the order page was reached. We likewise count whether the main button at the top of the start page was tapped, whether the name game was used (first entry, an attempt at “No”, the “Yes” – never what you type there, not even the name), which sections of the start page were half in view, and whether the “See it live” window was opened, a demo was chosen or the demo’s bar was tapped. We also count per day in which of three time classes a preview was finished (under 60 seconds, 60 to 120 seconds, over 120 seconds) – with no link to any person. If you come via an ad, we count these steps per ad ID – even if you never create a draft. For this, your page sends our server only the ad ID from the address and the name of the step, at most once per page view; if there is no ad ID in the address, nothing is sent. We store only daily totals, broken down at most by type of page, language, device type (phone or computer) and ad ID (for example cr0019 or cr0019_v2). For these totals we do not store any IP address and do not set a cookie. So that a visit via an ad is not counted twice, our server remembers a checksum of your network range until the end of the day – only in memory, never on disk. If you come via an ad, we also store its ID with your draft and, if you buy, with your order – that is, where the rest of your order details are kept, for example your email address and payment note. The ID identifies the ad, not you. We use it only to count which ad leads to previews and purchases. It is deleted together with the draft or the order. We link none of this to you: for these steps we store nothing about you, not even a checksum (one exists only for a visit via an ad). Like every request, the report appears in the access log (see above) and is briefly counted by the protection against mass requests. The daily totals contain no details about you; we delete them after 12 months.

Purpose: secure and stable operation, defence against attacks; for the counters: improving the order process and our ads. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR).

We serve fonts and scripts from our own server. A normal visit does not contact any third-party server. The only exception is if you consent to ad measurement (section 4.1).

4.1 Ad measurement with the Meta Pixel (only with your consent)

Whether the notice window for ad measurement appears depends on whether we are currently using ad measurement. If it does not appear, nothing described in this section happens. If it does appear: until you have chosen, and if you choose “Decline”, no Meta service is loaded, nothing goes to Meta and we set no cookie. Declining has no disadvantages; you can order just the same.

If you come to us via an ad, the address contains a click identifier from Meta (fbclid). We read it only on the page where you arrive. We do not pass it on through links on our pages, do not store it while you have not chosen, and do not send it to Meta. If you choose “Decline” (or nothing), nothing further happens with it.

If you choose “Accept”, we load the Meta Pixel of Meta Platforms Ireland Limited, Ireland (“Meta”) on the start page, the order page and the legal pages. The pixel runs in its own invisible area of the page. It never runs on customer pages (that is, never on a finished lovepage), nor on the demo pages, in the management area, or on the pages for reporting and withdrawal.

• Purpose: to measure whether visits and purchases come from our advertising on Facebook and Instagram, and to adjust the advertising accordingly.
• What Meta receives through the pixel in your browser: that a page was viewed (page view, PageView); that on the start page you looked at an occasion or an example, or that the order page was opened (ViewContent); that in the builder you chose an occasion or a design (CustomizeProduct); that your preview is ready (Lead); that you clicked “I like it – on to checkout” (AddToCart); that payment was started (InitiateCheckout); that the payment window of our payment service was opened (AddPaymentInfo); that you searched for a domain (Search) – without the name you searched for, because it is personal; and that a purchase took place (Purchase). For “on to checkout”, for payment and for the purchase, the amount in euros is added. The only product identifier sent is “page” or “domain” (depending on what you buy; not whether you have a logo removed and not which ending a domain has). Only at the purchase does our page also pass the pixel your email address as a checksum (hash). Every event carries a random event number so that Meta does not count anything twice. Technically this includes your IP address, details of your browser and device, the time and the identifiers from the cookies _fbp and _fbc. If you are logged in to Facebook or Instagram, Meta can link this to your account.
• What we report to Meta from our server after your purchase (the so-called Conversions API): this happens only if you consented before clicking “Order with obligation to pay”. Reported are: that you bought, the amount in euros, the time of payment, a random event number (so that Meta does not count the purchase twice), the identifiers from _fbp and _fbc, the identifier of your browser, and, as the page address, only the start page of lovepages.app, the product identifier (“page” or “domain”; not whether you have a logo removed and not which ending a domain has), your IP address as it reached us when you clicked “Order with obligation to pay”, your email address as a checksum (hash) and – if our payment service has already reported it – your country from the billing address, also as a checksum. If you buy a domain, no further details go to Meta for it. If a report fails, we try again, but for no longer than 7 days. A checksum cannot be calculated back, but Meta can compare it with the checksums of the email addresses of its user accounts: if your address belongs to a Facebook or Instagram account, Meta assigns the purchase to that account and thus to an ad. The checksum is therefore not anonymous.
• What Meta never receives: the occasion or kind of your page (for example a marriage proposal), the texts, the photos, the code or the link of your page, the name of the person you are giving it to, and your first and last name, your phone number, postcode and town – not even as a checksum. Your email address and country go to Meta only as a checksum; the IP address goes in plain text because Meta requires it that way.
• What the notice window says: The first level says: “May Meta Platforms Ireland measure via pixel cookie which ad brought you, with IP address and encrypted email on purchase, and use an ad profile? Optional.” Under “Read more” it says: “When you buy, our server also reports your IP address to Meta; we delete it on our side after it has been sent successfully, after 7 days at the latest.”
• Meta’s AI analysis of our pages (Meta’s setting “More detailed page and product information”): this setting is switched on in our Meta account. Meta may then automatically read details from what appears on our own pages (start page, order page, legal pages – the pixel runs there, and only with your consent), and only these types: general page information, business location and contact information, product identification, product attributes (for example the colour), reviews, ratings and prices. Switched off are: media content (photos), event and travel (dates and occasions), content classification (sorting content by topic) and authorship (names). The photos, dates, occasions and names of our customers are therefore not affected; on finished lovepages the pixel never runs anyway. If Meta changes these types, we will adjust this paragraph.
• Cookies: the pixel sets the cookie _fbp; how long Meta keeps it is up to Meta. If you come to us via an ad, the address contains a click identifier from Meta. Only if you consent do we store it in your browser as the cookie _fbc (90 days) and pass it on when you buy. Until you have chosen, we read it only on the page where you arrive and store it nowhere (see above). In addition, after you consent the pixel creates three entries in the browser storage (localStorage): lastExternalReferrer, lastExternalReferrerTime and multiFbc. They come from Meta; what Meta uses them for is up to Meta. They are created only with your consent, and we delete them when you withdraw.
• Legal basis: your consent (Art. 6(1)(a) GDPR); for storing and reading on your device, Section 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021).
• Joint responsibility and Meta’s role: for collecting the data with the pixel and through the Conversions API and transmitting it to Meta, we and Meta are jointly responsible (Art. 26 GDPR). The basis is Meta’s arrangement for joint controllers (Controller Addendum): https://www.facebook.com/legal/controller_addendum; for the reports from our server, Meta’s Business Tools Terms also apply: https://www.facebook.com/legal/terms/businesstools. We are responsible for informing you and for obtaining your consent. Meta is responsible for fulfilling your rights of access, rectification, erasure and your other rights regarding the data stored at Meta; you can contact Meta or us for this, and we forward requests about it to Meta within 7 days. Meta’s legal bases and your rights against Meta are set out in Meta’s privacy policy: https://www.facebook.com/about/privacy. For matching the checksums and for the measurement reports for us, Meta acts as our processor (Meta Business Tools Terms); what Meta does with the data beyond that after the transfer is Meta’s sole responsibility. Ad opt-out at Meta: you can also object to personalised advertising independently of us (opt-out): https://www.aboutads.info/choices and https://www.youronlinechoices.eu.
• Transfer to the USA: Meta Platforms Ireland may pass data on to Meta Platforms, Inc. in the USA; the basis is the EU-US Data Privacy Framework (status and standard contractual clauses: section 11).
• Retention by us: what we record with your order for the purchase report (_fbp, _fbc, browser identifier, event number, IP address) we delete as soon as the report has gone out to Meta successfully – usually seconds after payment. If sending fails, we keep these details, including your IP address, until sending succeeds, for 7 days at most; after that we delete them in any case. Your contact details for the purchase itself remain as set out in section 12. The time and version of your consent and the note on whether it was reported are kept until your order is deleted (section 12). Your choice in the notice window is stored only in your browser, not with us.
• Withdrawal: at any time via the link “Cookie settings” at the bottom of the page, as easily as giving consent. After that we no longer load the pixel and delete the cookies _fbp and _fbc and the browser storage entries lastExternalReferrer, lastExternalReferrerTime and multiFbc in your browser. If you withdraw before clicking “Order with obligation to pay”, we do not report your purchase. If you withdraw only afterwards, the purchase is still reported; what has already been transmitted is not affected by the withdrawal (Art. 7(3) GDPR). You can contact us with your request at any time (section 13).

5. When you order a lovepage

5.1 Your details, photos and the preview (draft)

In the form you enter: type of page, form of address, tone, language, your name, the name of the person, optionally a pet name, how you met, what you like about them, an inside joke, a date suggestion, a “together since” date, design and online period. You also upload 7 to 19 photos. A first name is enough.

• Before you upload photos, you promise us that you are allowed to use them. We store this promise with the time, language and version of the wording.
• Before storing the photos, we automatically remove location, camera and device data from them.
• So that your entries survive an accidental reload of the page, your browser remembers the texts from the form until your draft has been created – never photos (section 14).
• We store your draft on our server as you go, so that you can continue later. With the draft we store an encrypted checksum of your IP address (not the address itself), so that nobody can fill our storage with drafts; it is removed when you pay.
• Preview: Before you pay, the language model writes the texts of your page, and you see them as the person receiving the gift will see them. You can edit the texts and have them rewritten a limited number of times. Only you see the preview; a link to share is only available after payment. Before the preview is created, you confirm that your details may be sent to the language model for this purpose (section 5.4).
• If you do not pay, we delete the draft with photos and texts 7 days after your last change; because our deletion run works once a night, no later than 8 days after it. While purchases are not yet possible on our site, it is 1 day instead of 7 (so no later than 2 days after it). If you opened the payment window but no payment has reached us, we delete it 4 days afterwards at the earliest – that is how long the payment confirmation from our payment service can still take to arrive. You can also delete your draft yourself at any time.

Legal basis: for storing the draft and creating the preview: steps prior to entering into a contract at your request (Art. 6(1)(b) GDPR); for the checksum, our legitimate interest in protecting the service (point (f)). If your details reveal something about your sex life or sexual orientation – for example, whom you love –, we process them on the basis of your explicit consent, which you give before the preview (Art. 9(2)(a) GDPR). You can withdraw it at any time by deleting the draft or, later, the page.

5.2 Purchase

At checkout you enter your email address and confirm the points listed there. We store your consents with the time and version of the wording so that we can prove them (Art. 6(1)(b), (c) and (f) GDPR).

You may order from the age of 14.

5.3 Payment via Paddle

The seller and contractual partner for the payment is Paddle.com Market Limited, 30 Old Bailey, London EC4M 7AU, United Kingdom. When you click the order button, we load Paddle’s payment window and pass Paddle your email address, the price you chose and the number of your order. You enter payment details (card, PayPal, etc.) only with Paddle; we never see them.

Paddle processes your data under its own responsibility (payment, fraud prevention, taxes, invoice). In doing so, Paddle sets a technically necessary cookie from a protection service and loads its own auxiliary services within its window. Paddle’s privacy policy applies: https://www.paddle.com/legal/privacy

From Paddle we receive back: the transaction number, amount and currency, and later notifications about refunds or chargebacks. Paddle also reports to us the country of your billing address. We use it only to check, before a domain is bought or extended, whether we may sell to that country, and we delete it after 30 days (section 5.8). Legal basis: contract (Art. 6(1)(b) GDPR); for the country of your billing address, our legal obligation to comply with sanctions rules and our legitimate interest in doing so (Art. 6(1)(c) and (f) GDPR). For the United Kingdom, there is an adequacy decision of the European Commission (Art. 45 GDPR).

5.4 Texts written by artificial intelligence

The texts of your page are written by a language model (Claude by Anthropic) – already for the preview, so before you pay, and also if you do not buy in the end. For this we transmit only these details: language, type of page, form of address, tone and your answers on how you met, “what I like” and inside joke. For the “For couples” page, the details are different (see below).

• Your names stay with us. Before sending, we replace your name, the name of the person and the pet name with placeholders, and only put them back into the finished texts on our server. We do the same with recognisable email addresses and phone numbers in your answers.
• Other names that you mention in your answers (for example of friends) are sent along. So do not include surnames, addresses or other details through which someone could be found.
• “For couples” page: Here we transmit instead: language, look, the title and sentences of your milestones, your “reasons”, how many photo captions are needed and for which anniversaries a letter is created (which determines how many years you have been together). Here too, we replace your two names with placeholders, and recognisable email addresses and phone numbers likewise. Everything else you write in these fields – for example places or names of other people – is sent along as you write it. Also not transmitted for this page are the date you got together, the dates of the milestones, your places, the quiz and your list.
• Not transmitted are photos, your email address, the date suggestion, the date and the link to your page.
• Contractual partner: Anthropic Ireland, Limited; processing also takes place in the USA (Anthropic PBC).
• Anthropic processes the details only on our behalf, does not use them to train its models under the contract and, by its own account, deletes inputs and outputs within 30 days. If Anthropic detects a breach of its usage rules, retention there can be up to 2 years.
• There is no automated decision about you (Art. 22 GDPR) – not even in the check before activation (section 5.7): there, a person from our team always decides. You can edit the texts yourself in the preview and after the purchase, and have them rewritten a limited number of times.

For the transfer to the USA, the European Commission’s standard contractual clauses apply (Art. 46(2)(c) GDPR), see section 11.

5.5 Emails about your order

We send you an order confirmation with your private manage link and an email with the link to your finished page; also, where necessary, messages about a block, your withdrawal or a new manage link. No open or click tracking.

Reminders before the end: 14 and 3 days before your page ends (for a domain you bought from us, 30 and 7 days before it expires, see section 5.8) we remind you by email and tell you the prices for extending. Because the email contains an offer, it is advertising for our own, similar service. We base it on our legitimate interest in pointing out the extension to you as a customer (Art. 6(1)(f) GDPR; § 174(4) Austrian Telecommunications Act 2021). You can object at any time, free of charge (Art. 21 GDPR): with “Unsubscribe from reminders” on your manage page. You will then receive no more reminders. We do not use your email address for any other advertising.

Sending is handled by Postmark (AC PM LLC, 1 N Dearborn Street, Suite 500, Chicago, IL 60602, USA) on our behalf. By its own account, Postmark stores the content and delivery data of each email for 45 days. On our server we keep sent emails for 30 days.

Legal basis: contract (Art. 6(1)(b) GDPR). Postmark is certified under the EU-US Data Privacy Framework (Art. 45 GDPR).

Keep the manage link safe and do not pass it on. Anyone who has it can edit and delete your page. It is also in your browser history.

5.6 Connecting your own domain

If you already have your own domain, you can connect it to your page via your manage link. The following then also applies:

• We store the domain name with your order and check whether its records point to our server.
• Certificate: For the encrypted connection, our server automatically requests a certificate for your domain – from Let’s Encrypt (Internet Security Research Group, USA) or, if that does not work, from ZeroSSL (ZeroSSL GmbH, Austria). Only the domain name is transmitted in the process. Every certificate is entered with the domain name in public certificate logs, which cannot be deleted. The certification authorities act under their own responsibility in doing so.
• Who can see the page: At your domain, the page can be reached without the secret code – by anyone who knows or guesses the domain. Domain names are public: in the internet’s address book and in the certificate logs. Automated programs often visit new domains shortly after they have been entered. Anyone who opens the domain first sees the note with your name; the texts and photos only after “View it”. Search engines remain blocked.
• Our advice: Use only first names for the domain, no surnames. Only connect a domain if the person the page is for will agree to it.
• End: If you disconnect the domain, or if the page is removed or deleted or its online period ends, the domain no longer leads to anything on our side. The domain itself remains yours; the entries in the certificate logs remain.

Legal basis: contract (Art. 6(1)(b) GDPR). Retention: as for your page.

5.7 Check before activation

Before your page goes online and whenever you change its texts, our system automatically checks the names, the text details you entered and the texts of the page against fixed patterns (for example phone numbers, addresses, threats). Purpose: to protect the person the page is for and third parties from exposure, harassment and crimes, and to fulfil our obligations as a hosting service. Legal basis: our legitimate interest and that of the person shown (Art. 6(1)(f) GDPR), and the performance of our contract with you, which excludes such content (Art. 6(1)(b) GDPR). The check runs on our server.

If the check finds something, your page is only put on hold, not deleted: a person from our team decides whether it goes online. There is therefore no decision based solely on automated processing that produces legal effects or similarly significant effects within the meaning of Art. 22 GDPR. You can express your point of view at any time (by replying to our email). We store only which kind of sign was found in which field – not the text itself –, in your order and in our operational notifications, for as long as the order or the operational notifications are kept (section 12).

5.8 Buying a domain from us

If you buy a domain at checkout, it is registered in your name. Every domain needs a holder with contact details. That is why we then also ask for first name, last name, address, country and phone number.

• Who receives the data: We register the domain through the registrar Openprovider (Hosting Concepts B.V., the Netherlands). For this we pass on to Openprovider your name, your address, your phone number, the email address of your order, the domain name and your order number. Under the rules of ICANN – the organisation that manages domains worldwide – Openprovider passes on registration data: to the registry for your domain ending, to ICANN and to an escrow service that deposits the data for safety. The registry, ICANN and the escrow service process the data under their own responsibility. Openprovider’s privacy policy: https://www.openprovider.com/legal/privacy-policy
• Public directory (WHOIS): We order WHOIS protection as well. Where the domain ending allows it, your contact details then do not appear in the public directory. The domain name itself is always public – in the internet’s address book and in the certificate logs, often long after it has expired.
• Our company as contact: You are the holder. We enter HP Capital GmbH as the technical contact and the administrative contact.
• Your page under the domain: After the registration we connect the domain to your page. Everything from section 5.6 then applies: the page can be reached at the domain without the secret code, and a certificate is requested for the domain.
• Emails about the domain: 30 and 7 days before the domain expires, we remind you by email (section 5.5). Once, shortly after it expires, we write to you again; this email is a mandatory notice and also arrives if you have unsubscribed from reminders.
• Name, address, phone number with us: We need them only for the registration. We delete them on our side as soon as the domain is registered or it is clear that it will not be registered. If you do not pay, we delete them together with your draft. If we have to check a registration by hand, we delete these details 30 days after your payment (in the nightly deletion run, so at the latest one day later). At Openprovider and the registry they remain for as long as the domain is registered, and afterwards under their rules – at Openprovider, by its own account, for at least two years.
• Record of the domain: We keep the domain name, the email address of your order, language, country, the dates of registration, extension and expiry, the process number at the registrar and the proof of your consent at checkout until 90 days after the domain expires – even if your page ends earlier, is deleted or is refunded in full. We need them to remind you, for an extension and to give you the transfer code. If a paid extension is still open, the record stays until it is completed.
• Transfer outside the EU: Openprovider is based in the EU. Depending on the domain ending, the registry is based outside the EU, and ICANN is based in the USA (section 11).

Legal basis: contract (Art. 6(1)(b) GDPR) – without these details, no domain can be registered in your name.

6. Your finished lovepage

• The page shows your names, the texts and the photos. It can only be reached at its link after you pay. It is reachable at an address with a random code that nobody can guess – and, if you wish, also at your own domain (section 5.6). We block it for search engines and prevent it from being cached.
• The page is meant for the person you send it to. Do not post the link publicly online. You are responsible for being allowed to use the photos and details.
• Anyone who opens the page first sees a note saying who it is from, and can choose: view it or remove it immediately. We record when the page was first viewed – only the time, not by whom.
• Online period: 3, 6 or 12 months from activation after your payment. Once it has ended, the page can no longer be reached. We delete the page, photos, details and your email address 30 days after the end (in the nightly deletion run, so at most one day later). Until then you can extend the page; during this time nobody can reach it. Legal basis for these 30 days: your contract and your instruction in the Terms of Use (sections 4.3, 14.4).
• Deleting it yourself: Using your manage link, you can delete the page completely at any time. The page, photos and details are then gone immediately.
• Removal by the person shown: If they take the page offline, you get an email. After 7 days we delete the page, photos and details. We do not tell you who removed the page or why.
• After a full refund or a chargeback we delete the page immediately with all photos and details. If you have bought a domain from us, only the record of the domain remains (section 5.8).

7. What remains after deletion

• Record: order number, times of order, payment, completion and deletion, what triggered the deletion, payment details (amount, transaction number) and your consents – without names, texts, photos and email address. Retention: 3 years from deletion. Purpose: obligations to provide evidence and accountability, defence against claims (Art. 6(1)(f), Art. 17(3)(e) GDPR).
• Backups: Our server creates a backup every day. Deleted data can remain in it for up to 30 days; after that the backups are deleted. If we also make a copy outside the data centre, we do so only in encrypted form, on a separate computer of our own in Austria and likewise for no more than 30 days; the key to open it does not exist on the server. If we restore a backup, we delete again anything that was deleted and block again anything that was blocked.

8. You are shown on a lovepage

Someone who knows you personally has created this page privately for you and gave us details and photos for it. That person’s name is on the page. We store and display the page on their behalf. You are not our customer – your rights still apply in full, and you can contact us directly about anything.

• Which data: your first name or name, a pet name if there is one, photos of you, short personal details (e.g. how you met) and the texts written from them.
• Where from: from the person who ordered the page.
• What for: only to create this one page and show it to you. We do not analyse your data, do not use it for advertising and do not pass it on – except to the service providers in section 10. Only text details go to the language model, without photos and without your name.
• Who can see the page: only people who have the link. Search engines are blocked. If the person who ordered the page has connected it to their own domain, anyone who knows that domain can open it; the domain name is public (section 5.6).
• How long: until the end of the page’s online period (12 months at most); after that nobody can reach it and it is deleted 30 days later, in backups up to 30 days longer – or shorter if you or the person who ordered it removes the page. If the page is never bought, only the person who ordered it has seen it as a preview; we then delete it 7 days after their last change, no later than 8 days after it (while purchases are not yet possible on our site: 1 day instead of 7).
• Remove this page: “Remove this page” is on the page from the start. One click and one confirmation are enough: the page is immediately unreachable for everyone – not even via such a domain – and is permanently deleted after 7 days. You do not have to give a reason or identify yourself. The person who ordered the page only learns that the page can no longer be reached – not who removed it or why. We cannot delete such a domain itself or its entries in public certificate logs; they belong to the person who ordered the page.
• Legal basis: The person who created the page privately for you is responsible for the selection and content. Where we are responsible ourselves, we rely on the legitimate interest in delivering a personal message to you (Art. 6(1)(f) GDPR). You can object to this at any time (Art. 21 GDPR) – “Remove this page” is that objection.
• Your rights: access, rectification, erasure, restriction, objection and complaint to the data protection authority (section 13).

8.1 Music on the personal page

If the person who ordered the page has chosen a song, we load the player of the chosen service (Spotify, YouTube or Apple Music) the first time you tap on the page and start the music. In doing so, the service receives technical data such as your IP address and details of your browser; whether and which cookies it sets is decided by the service itself. Before the first tap there is no connection to these services. Providers: Spotify AB (Sweden), Google Ireland Limited (YouTube, Ireland), Apple Distribution International Ltd. (Ireland). The legal basis is our legitimate interest in playing the music requested by the person who ordered the page (Art. 6(1)(f) GDPR).

8.2 Date appointment

If the person who receives the page chooses a date after the “yes”, we store the day, the time and the wish chosen until the end of the page’s online period and send them by email to the person who ordered the page. The legal bases are the performance of our contract with the person who ordered the page (Art. 6(1)(b) GDPR) and our legitimate interest in delivering the answer (Art. 6(1)(f) GDPR). The details are deleted together with the page.

9. Reports, withdrawal, contact

• Report this page: We store the page’s code, your reason, optionally your contact details and whether you are shown on the page yourself. If you state that you are shown on it, the page goes offline immediately and is deleted after 7 days. If you give an email address, you get a confirmation of receipt. We reply within one month. Retention: reason and contact details 12 months after the case is closed; after that only number, date and outcome remain, for 3 years in total. A report that was never marked as closed is deleted 18 months after it was received at the latest. Legal basis: compliance with our legal obligations (Art. 6(1)(c) GDPR) and legitimate interest in protection against misuse (point (f)).
• Withdrawal: We store your email address, the order number and your message, and confirm receipt by email. Retention: 3 years. Legal basis: contract and legal obligation (Art. 6(1)(b) and (c) GDPR).
• Contact form: We store your topic, your email address, your message and, if you provide them, your name and your order number. Your message is sent by email to our mailbox; you get a confirmation of receipt without the text of your message. On our server we delete the message 12 months after receipt; in our mailbox the same period applies as for emails to us (next point).
• Emails to us: We process your message in order to answer it and delete it 12 months after the matter is closed; we keep data protection requests for 3 years. Our mailbox is hosted by Google Workspace (Google Ireland Limited, Ireland; processing also in the USA, see section 11).
• Legal basis for the contact form and emails: contract or steps prior to entering into a contract (Art. 6(1)(b) GDPR), otherwise our legitimate interest in answering requests (point (f)); for data protection requests, our legal obligation (point (c)).
• Operational notifications: Faults and events such as reports, withdrawals or messages generate a notification to us that serves operations only. Retention: 90 days.

10. Who receives data?

We send the operating status of our server (only type and figures, for example “disk 91 %”, no customer data) by iMessage or SMS, via Apple or the mobile network, to the operators’ phone numbers.

There are no other recipients. We do not sell data. Authorities receive data only if we are legally obliged to provide it; if we suspect serious crimes, we inform the police.

11. Transfers to countries outside the EU

• USA – Postmark: AC PM LLC, as a company of ActiveCampaign, LLC, is certified under the EU-US Data Privacy Framework. For such companies, the European Commission has found an adequate level of protection (Art. 45 GDPR). Standard contractual clauses have also been agreed.
• USA – Anthropic: Anthropic is not certified under the Data Privacy Framework. The basis is the European Commission’s standard contractual clauses (Art. 46(2)(c) GDPR); you can request a copy from us. In the USA, authorities can access data under certain conditions; that is why we transfer as little as possible there (not your two names, no photos, no email address, no links).
• USA – Google: Our mailbox runs on Google Workspace (Google Ireland Limited as processor). Google LLC is certified under the EU-US Data Privacy Framework (Art. 45 GDPR); in addition, the standard contractual clauses in Google’s data processing addendum apply (Art. 46(2)(c) GDPR).
• USA – Let’s Encrypt: Only the domain name is transferred, and only if you connect your own domain. This is necessary for the encrypted connection you requested (Art. 49(1)(b) GDPR).
• Registry and ICANN for a purchased domain: A domain can only be registered in your name through the registry for its ending. Depending on the ending, it is based in the EU (for example .de: DENIC eG, Germany) or outside it, for example in the USA (for example .com and .app); ICANN is based in the USA. The transfer there is necessary for the contract that you request by buying the domain (Art. 49(1)(b) GDPR). You can see the ending at checkout in the domain you chose.
• USA – Meta: Meta Platforms Ireland may pass data on to Meta Platforms, Inc. in the USA, but only if you consent to ad measurement (section 4.1). For companies certified under the EU-US Data Privacy Framework, the European Commission has found an adequate level of protection (Art. 45 GDPR). Meta Platforms, Inc. is actively certified there (public list, as of 18 October 2026; recertification is currently being reviewed, the next due date is 23 July 2027). If the Data Privacy Framework lapses, Meta Ireland can rely on standard contractual clauses (Art. 46 GDPR), which are part of Meta’s addendum for the transfer of European data.
• Music services: If the player of Spotify, YouTube or Apple Music loads on a lovepage (section 8.1), the service concerned processes the data under its own responsibility and may also transfer it to the USA. The basis and safeguards for this are set out in the service’s privacy policy.
• United Kingdom – Paddle: adequacy decision of the European Commission (Art. 45 GDPR). Paddle may transfer data onwards under its own responsibility, including to the USA.

For people in Switzerland: we ourselves process data in Austria; the recipient countries are Germany, Ireland, Austria, the USA and the United Kingdom; if you buy a domain, also the Netherlands and the country of the registry for your domain ending; if a music player loads on a lovepage, also Sweden and the USA.

12. Retention periods at a glance

13. Your rights

With regard to us, you have the right to

• access (Art. 15 GDPR),
• rectification (Art. 16),
• erasure (Art. 17),
• restriction of processing (Art. 18),
• data portability (Art. 20),
• object to processing that we base on a legitimate interest (Art. 21),
• withdraw consent with effect for the future (Art. 7(3)).

Write to us at hello@lovepages.app. We reply within one month at the latest. We only ask for ID if we have reasonable doubts about who you are. As a buyer, you can do a lot directly via your manage link (edit, delete); as the person shown, via “Remove this page”.

Complaint: You can lodge a complaint with a data protection authority, in particular where you live. The authority responsible for us is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40-42, 1030 Wien, phone +43 1 52 152-0, dsb@dsb.gv.at, https://www.dsb.gv.at

14. Cookies and similar technologies

We do not set any cookies on lovepages.app ourselves – except where you consent to ad measurement: then we store Meta’s click identifier as the cookie _fbc, and the Meta Pixel sets the cookie _fbp (section 4.1). This happens only with your consent (Section 165(3) TKG 2021); without it, neither cookie is created. The Meta Pixel also creates the entries lastExternalReferrer, lastExternalReferrerTime and multiFbc in the browser storage (localStorage); they come from Meta, Meta decides their purpose, and we delete them on withdrawal (section 4.1). They too are created only with your consent.

If the notice window for ad measurement appears (section 4.1), your browser also remembers your answer (“yes” or “no”), the version of the notice text and the time – without any identifier. This only serves so that we do not ask you again at every visit and can prove your consent; it stays on your device until you change your choice or clear your browser storage.

We use your browser’s storage in two places only, and the two are connected. First: if you enter a name on the start page and click “Continue”, your browser remembers that name, the template you chose and – if you picked one – the form of address, so that the order page already knows them and you do not have to type them again. Second: while you fill in the order form, your browser remembers your text entries (type of page, form of address, tone, language, names, your answers, the date) and the step you are at. In both cases we use the browser’s session storage (sessionStorage), which only applies to this one tab. That way your entries are not lost if the page reloads – for example in the browser inside an app such as Instagram. On the start page, nothing is stored until you click “Continue”. Photos, checkboxes, your order’s code and your manage key never go into this storage. The data stays on your device; it only reaches us when you submit the form yourself, and it never reaches anyone else. The storage is cleared as soon as your draft has been created or you have bought; if you close the tab before that, your browser deletes it. This storage is strictly necessary for us to provide the order form you requested; it does not require consent (Section 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021)).

Your private manage key is only in the part of the address after the # character; your browser does not transmit this part to servers.

Paddle’s payment window is only loaded when you press the order button. Paddle then sets a technically necessary cookie to protect against automated access and loads its own auxiliary services in its window. This is necessary to process the payment you requested (Section 165(3) TKG 2021). Details are in Paddle’s privacy policy.

If the music player loads on a lovepage (section 8.1), the service concerned may set its own cookies in its window and store data in your browser. We have no influence over this; details are in the service’s privacy policy.

15. Security

Encrypted transmission on all pages · servers in Germany · addresses that cannot be guessed · managing only with a secret key · photos without location data · daily backup with verification, off-site copies only encrypted · access to the data only for a few named people.

16. Do you have to give us data?

Without the details for the page, the photos and an email address, we cannot create a lovepage or send you the link. For a domain that you buy from us, we also need your name, address and phone number. Everything else is voluntary.

17. Changes

We update this notice when the shop or the legal situation changes. The version shown here applies.