Privacy Policy

Information we collect

We collect information you provide and technical information needed to operate and protect Send A Roast.

• Account data such as email address, username, password hash, verification and password-reset records, account status, and login timestamps.
• Google sign-in identifiers and provider email when you choose Google authentication.
• Roast data such as template choices, sender and recipient names, custom and sincere messages, short-link status, creation dates, and expiration dates.
• Report and moderation data such as report reasons, notes, attestations, decisions, strikes, and admin audit records.
• Technical and usage data such as event type, timestamps, and hashed IP-address and user-agent values used for security, rate limiting, and aggregate metrics.

How we use information

• Create and secure accounts, authenticate users, and deliver verification or password-reset messages.
• Generate, host, expire, and share roast cards and short links.
• Enforce daily limits, prevent abuse, investigate reports, moderate content, and keep an audit trail.
• Measure feature use, diagnose problems, and improve reliability and safety.
• Comply with law and protect the rights, safety, and integrity of users, Send A Roast, and others.

Public links and retention

Roast links are intentionally shareable with anyone who has the URL, but they are marked not to be indexed by search engines. Search engines and third parties may not always honor those instructions.

Roasts are designed to expire after 69 days. On expiration, the recipient name is removed from the stored roast. Other account, moderation, security, and audit data may be retained as long as reasonably needed to operate the service, resolve disputes, prevent abuse, and meet legal obligations.

Service providers and disclosure

We may use hosting, database, email-delivery, and Google authentication providers to process information on our behalf. They receive only the information needed to provide their service.

We may disclose information when legally required, to investigate abuse or security issues, to protect someone from harm, or as part of a business transfer subject to appropriate safeguards.

Security, choices, and children

We use reasonable technical and organizational safeguards, but no online service can guarantee absolute security. Use a unique password and keep shared roast links away from people who should not see them.

You may choose not to provide optional content, remove your own active roast, or contact support@sendaroast.com to ask about access, correction, or deletion of account information. Some records may need to be retained for security, moderation, or legal reasons.

Send A Roast is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Policy updates and contact

We may update this policy as the service changes. We will revise the date above when changes take effect.

Privacy questions or requests can be sent to support@sendaroast.com.