Privacy policy

Last updated 28 October 2026

happydiwali.to lets you send personal Diwali postcards. It is run by Sameep Rehlan in India. This page says what we collect, why, and how to get it deleted. By using the site, verifying your email, saving a Pro design or sending us an enquiry, you agree to this policy.

What we collect

• Names in links. The names you type (yours and the people you send to) go into the link itself, like ?riya-from-sameep. We don’t store free links, but anyone with a link can see the names in it.
• Your email, and your phone if you give it. Only when you choose to verify your email (to send to many people at once, see who opened, or save a Pro design). We email you a one-time sign-in code. We don’t send marketing email.
• Who opened your wish. For links made while you’re signed in, and for Pro cards, we record the recipient’s name from the link, and whether they opened it, opened it all the way and played a game, with times. Only you (and we) can see this.
• Pro designs. Your brand name, logo, colours, line, song link and button link, so your card can show them.
• Payments. Pro payments are handled by Dodo Payments on their own secure page. We never see your card or UPI details; we keep the payment reference and amount.
• Game results on the wall. If you pin a game result, it shows on a public wall shared with diwaliparty.live, with your first name and last initial.
• Enquiries. If you ask for a custom invite, we keep your name, contact and message so we can reply.
• Usage. Google Analytics and our own counters record page visits and actions (for example “card opened”). Personal links are reported to Google without the names in them.

Why

To run the site: make and show your cards, sign you in, show you who opened your wishes, take Pro payments, reply to enquiries, and see what’s working so we can improve it.

Who else handles it

Cloudflare (hosting and data storage), Resend (sending sign-in emails), Google (analytics), Dodo Payments (payments) and YouTube (if a card plays a song). We don’t sell your data.

How long we keep it

Sign-in codes expire in 10 minutes. Account details, open stats and Pro designs are kept while you use them; ask and we’ll delete them. Analytics follow Google’s retention settings.

Your rights

Under India’s Digital Personal Data Protection Act you can ask what we hold about you, ask us to correct or delete it, and withdraw your consent. Email [email protected] and we’ll reply within 7 days. That address is also where to raise any complaint.

Children

Signing in and Pro are for people 18 and over.

Changes

If this policy changes, the date at the top changes too.