Privacy policy

Lilbird is run by [company name], [registered address], Lithuania.

We are the controller of your personal data. Questions or requests: privacy@lilbird.app.

What we collect

• Your account: the identifier Apple or Google gives us, your email (if Apple or Google shares it, or the one you sign in with), your name, your Lilbird link (handle) and time zone. When you sign in by email, we keep the code we send only as a scrambled copy, for 10 minutes. If you write on this website without signing in, your account is a random one this browser keeps for 180 days, with no email or name, until you add your email.
• Your age: we check your birthday (or Apple's age range) to confirm you're 18 or older; on this website you tick “I'm 18 or older”. We keep only the result, never that birthday.
• Notes: notes you write, any name you type with them, and who wrote them (until that link is erased, see below), notes on your wall, pins, and the questions you start walls with. Any name you type is shown with your note, in quotes. It isn't checked against who you are. The person who started a wall may let anyone with its link read its notes, now or later; then the text, the typed name and whether it's pinned can be read by anyone with the link, never who wrote it. On a live wall, notes can be read as soon as they're sealed.
• Walls for a friend: when you make a wall for someone, the first name you give them, the occasion and its date. If they aren't on Lilbird, we keep only a scrambled copy of the link that lets them claim the wall. The person who started a wall sees how many notes it has, never the notes or who wrote them.
• Notification settings: which notifications you turn off. Between 22:00 and 8:00 your time, most notifications wait until the morning, and we delete each one once it's sent.
• Safety: reports, blocks, and our decisions. If you report a note on this website, you may give an email address; we keep it with the report, and only our safety team sees it.
• Devices: in the app, a push notification token, an install identifier and an Apple DeviceCheck token (used to keep banned devices out).
• Purchases: if you buy Lilbird Plus, we keep the plan, when it renews or ends, whether it was refunded, and Apple's identifier for the subscription. We give Apple and RevenueCat a random code, never your account id, so a purchase reaches the right account. Apple never gives us your name or your payment details. We sell nothing that ships, so we never ask for a shipping address.
• Funnel counts: daily totals of steps on a wall's page (viewed, write tapped, seal tapped, signed in, sealed), with no account or wall attached.
• Connection data: your IP address, used to limit abuse. Our server logs keep it for 14 days.

Why we use it

• To run Lilbird for you (our contract with you).
• To keep people safe and stop abuse (our legitimate interest, and our duties under the EU Digital Services Act).
• To meet legal obligations.

Anonymity, and how long we keep things

• The link between a note and its writer is erased 30 days after the wall opens. After that, nobody can connect the note to its writer, including us and the writer.
• A reported note keeps that link until the report is closed.
• Notes that never open are deleted 60 days after they were written, or 60 days after their wall's opening day if that's later. A note held by an open report waits for the decision.
• A wall made for someone who never claims it, or one that never got enough notes, is deleted 30 days after its day. A claim link stops working after 30 days.
• When the person a wall was made for deletes it, it's hidden at once and erased shortly after, unless a report needs it.
• When you delete your account, it's hidden at once and erased after 30 days. Your unopened notes are deleted; opened notes stay on their walls with nothing linking them to you.

Requests to identify a writer

We don't tell anyone who wrote a note. Under GDPR Art. 15(4), a request for your own data doesn't extend to someone else's identity. We disclose a writer only under a binding order from a court or authority, and after the 30-day erase, we can't.

Who processes data for us

• DigitalOcean: servers and database (United States).
• Vercel: this website.
• Anthropic: checks note text, typed names, and the title or subline you write for a wall (with the first name of the person it's for) for safety, never who wrote them. Under its commercial terms, it doesn't use that text to train its models.
• Apple and Google: sign-in. Apple also delivers notifications, and sells Plus and handles its payments under its own privacy policy.
• RevenueCat: counts Lilbird Plus sales for us. When you buy, it receives the random code above (never your name, email or account id), what you bought and when, and your phone's identifier for Lilbird (Apple's “identifier for vendor”). When you delete your account, we ask RevenueCat to erase it too.
• Resend: sign-in codes, email to our safety team, email to writers about decisions, and, if you added your email to a note, email when the wall opens or your note is pinned (each one has a link that stops them).

Data sent outside the EU is protected by the European Commission's standard contractual clauses or an adequacy decision. We don't sell personal data or show ads.

Cookies

This website sets only the cookies it needs: one that keeps you signed in (or keeps a note you wrote without signing in yours), and a short-lived one that protects sign-in. There are no advertising or tracking cookies.

Your rights

You can ask to access, correct, delete or export your data, or object to how we use it, by writing to privacy@lilbird.app. You can delete your account yourself at any time. You can also complain to a data protection authority, such as Lithuania's State Data Protection Inspectorate.

Age

Lilbird is for people 18 and over. If we learn an account belongs to someone younger, we delete it.

Changes

We'll post changes here and tell you in the app before they take effect.