Privacy
Effective 29 September 2026
Short version
Surprise Pass has no accounts, no analytics and no ads. The passes you design stay in your browser.
What stays on your device
Your draft pass and your unlock are saved in your browser's local storage so they are there when you come back. Images and print sheets are created in your browser.
Reveal links
The trip details for the scratch-off reveal are stored inside the link itself (after the # sign), which browsers do not send to the server. Anyone with the link or the printed QR code can open the reveal, so treat it like the gift itself.
Payments on the website
Payments are handled by Stripe. When you pay or restore a purchase, the site asks Stripe whether a payment exists for your checkout session or email, and nothing else is kept. Stripe's privacy policy applies to the payment itself.
Purchases in the iPhone and Android app
In the app, the unlock is bought through the App Store or Google Play. The app uses RevenueCat to confirm the purchase: RevenueCat receives the store receipt and an anonymous app user ID, not your name or email. Apple, Google and RevenueCat privacy policies apply to the purchase. When you save or print a pass, the image is handed to your phone's share sheet; the app does not read your photo library.
Changes
Any change to this policy will be posted here with a new date.