Privacy Policy

This policy explains what Sing the Day (“we”, “us”) collects when you use our site and buy a song, what we do with it, and the choices you have.

What we collect

• Your answers about the birthday person: their name (and how to say it, if you tell us), your relationship to them, the pronouns to use, the age they’re turning (optional), up to three traits, up to three details in your own words, the feeling you want, an optional line of your own, and the music style and voice. If you ask for a remake, we also keep what you want changed and any note you add.
• Your email address, which is where we send your song. We ask for yours, never the birthday person’s.
• The birthday’s month and day, only if you ask for a reminder on your song page.
• Payment details, which you enter into Stripe’s payment form and which go to Stripe, not to us. We never see your full card number. If you pay with Apple Pay, Google Pay or Link, Stripe may also receive the email address from that wallet.
• Your progress through the form, saved on our server each time you answer a question, whether or not you pay: your answers and email so far, which question you reached, the random analytics ID described below, the campaign tags from the link you arrived by, and whether you’re in Instagram’s or Facebook’s in-app browser.
• Usage information, described under “Analytics” below.

About the birthday person

The birthday person’s details come from you, not from them. Please share only what you’d be happy for them to hear in a song, and leave out sensitive information such as health details, addresses or phone numbers. Their first name is part of the gift link, and the gift page and its preview image in chat apps show it.

How we use it

• To make your song and its remakes, and to show them on your song page and gift link.
• To send you the emails listed below.
• To take payment, handle refunds and answer your questions.
• To understand how people use the site, so we can improve it, and to keep it secure.
• To measure whether our ads on Facebook and Instagram lead to songs, and to show them to people likely to want one (see “Ads on Facebook and Instagram” below).

Emails we send

• Your song is ready, with links to your song page and gift link, and another email each time a remake is ready.
• One reminder if you reach checkout but don’t finish, an hour or two later, with a link back to your answers. We send it at most once for each song and no more than once a week to the same address, and it has a link to stop these emails for good.
• A birthday reminder, only if you ask for one on your song page: an email a week before the birthday, every year, until you stop it with the link in the email.
• Replies when you write to us.

Stripe may also email you a receipt for your payment. We don’t send newsletters or other marketing email.

Analytics

We use PostHog to see how people move through the site, such as which question of the form they reach and whether checkout worked. Its browser software sends page views, page exits and our checkout progress events directly to PostHog. These requests also give PostHog your IP address, which it can use to estimate your approximate location. Events include a random browser ID, the page and referring page without query strings, browser and screen information, and campaign tags from the link you arrived by. Our checkout progress events never include names, anything you type or email addresses. A few record a choice you tapped, such as the music style.

PostHog also records privacy-masked session replays so we can see where visitors get stuck. Its browser recorder sends page layout, public page text and interactions to PostHog. It masks form entries and displayed gift details, names and email addresses. It does not record network requests, their contents or console logs. Replays use the same anonymous browser and session IDs as the events. We do not record analytics or replays on localhost.

Ads on Facebook and Instagram

We advertise on Facebook and Instagram, and use two Meta tools to learn which ads lead to songs, so Meta can show our ads to people likely to want one:

• The Meta Pixel, a script from Meta on our home page, the song form and our policy pages. It tells Meta when you view one of those pages, reach the last step of the form, open checkout and pay, with the price. Like any page request, it gives Meta your IP address and browser details, and it reads or sets Meta’s cookies (see below). It never runs on your song page or gift links, and we turn off its automatic collection of button and page details.
• The Conversions API, which sends Meta the same checkout and payment events from our server: the price, your email address scrambled with a one-way hash (SHA-256) so Meta can match it to an account but can’t read it, and the IP address, browser details and Meta cookie IDs from when you opened checkout.

Meta never gets the birthday person’s name, anything you typed into the form, your song or your gift link. Meta uses this information under its own privacy policy.

To opt out: turn on Global Privacy Control in your browser (supported by some browsers and extensions), and we won’t load the Pixel or send your checkout and payment to Meta. You can also block third-party scripts or cookies in your browser, and choose how Meta uses activity from other sites for ads in your Meta ad preferences.

Cookies and your browser’s storage

Sing the Day doesn’t set cookies of its own. Stripe’s payment form may set some to process the payment and prevent fraud, and the Meta Pixel sets Meta’s _fbp cookie (a random browser ID) and, when you arrive from a Facebook or Instagram ad, _fbc (the ad click’s ID). The site also saves a few things in your browser’s local storage, on your device only:

• your unfinished answers and email, so you can pick up where you left off (for up to 14 days, and cleared once you pay; our server keeps its own copy, described under “How long we keep it”);
• your last few orders, so the home page can link back to your songs;
• which versions of your song you’ve played;
• PostHog’s random analytics ID and current visit ID;
• if you arrived from a Facebook or Instagram ad, that ad click’s ID, and which of your songs have already been reported to Meta, so none is counted twice.

You can clear these at any time in your browser’s settings.

How long we keep it

We keep your song and its lyrics, your answers and your email address until you ask us to delete them, so your song page and gift link keep working. Your birthday reminder stays until you stop it or ask us to delete it.

If you don’t pay, the answers and email you gave so far stay on our server, not just in your browser, so we can send the one reminder above, link you back to your song, and see where people stop. We delete them 90 days after you last changed them. If you do pay, they’re kept with your order.

To have your song and your information deleted, email us at singtheday0@gmail.com from the email address you used at checkout, and include your song page link if you have it. We’ll delete your songs, answers, gift link and reminder from our storage, along with any unfinished songs we still keep for that address. Stripe keeps its own record of the payment, which includes your answers and, for Meta’s events, the IP address, browser details and Meta cookie IDs from checkout, under its own policies. What Meta received is kept under Meta’s policies.

Your choices and rights

You can ask us for a copy of the information we hold about you, ask us to correct it, or ask us to delete it. We may need to confirm the request comes from the email address used for the order. Depending on where you live, the law may give you further rights; ask us and we’ll help. You can stop the checkout reminder and the birthday reminder with the link in those emails.

Keeping it safe

Songs are kept in private storage and play only through your song page and gift link. Your song page link works like a password: anyone who has it can see your song page, make your remakes and change your reminder, so keep it to yourself and send the gift link instead. No system is perfectly secure, but we work to protect your information.

Children

Sing the Day is for adults buying a gift, and we don’t knowingly collect personal information from children under 13. A song can be about a child; those details come from the adult making it. If you believe a child has given us their information, please email us at singtheday0@gmail.com and we’ll delete it.

Where we are

Sing the Day is based in the United States. If you use the site from somewhere else, your information is processed in the United States and wherever our service providers operate.

Changes to this policy

If we change this policy, we’ll update it here and change the date at the top.

Contact

Questions about your privacy? Please email us at singtheday0@gmail.com. See also our Terms of Service.