隐私政策
最后更新：2026年10月17日
如英文版本与任何翻译版本之间存在冲突或不一致，在适用法律允许的范围内，以英文版本为准。 阅读英文版本
简要说明
我们尽可能少地保存数据。我们不出售你的数据，不使用广告追踪器，语音录音会在 90 天后自动删除。如果你希望提前删除任何内容，请发邮件至 support@sharelove.io，我们会照办。
Sharelove.io（“我们”）是本文所述个人数据的控制者。Sharelove.io 背后公司的法定信息载于本页底部。如有任何关于你数据的问题，请写信至 support@sharelove.io。
我们收集哪些信息
当你寄出卡片时：
- 你的姓名和电子邮箱
- 收件人的姓名，以及仅在你要求我们替你发邮件时才收集的收件人邮箱。如果你选择自己分享链接，我们根本不会收到对方的邮箱。
- 收件人的电话号码（如果你填写了）
- 你输入的文字留言
- 你录制的语音（如果你录了）
- 该录音的字幕（如果你的浏览器生成了字幕）
- 你选择的设计和场合
- 你在付款前给出两项确认的日期和时间，我们保存这些记录作为你已确认的证明
- 你是否勾选了“希望收到新设计邮件”这一可选项，以及勾选时间。如果你没有勾选，我们不记录任何内容——空白不是我们保存的“拒绝”，而只是表示没有同意。
当你付款时：我们从不查看或保存你的银行卡信息。付款完全由 Stripe 在其自己的页面上处理。我们只会收到付款编号、金额、币种以及付款是否成功。
自动收集：你的 IP 地址，用于限制对我们公开接口的请求频率，防止滥用。它只会被短暂保存，且仅用于这一目的。
当你联系我们时：你的姓名、邮箱以及你写给我们的内容。
当你购买卡片礼包时： 你的邮箱地址，以及你填写的名字（如有）；礼包码及已使用的额度；用它制作了哪些卡片；以及 Stripe 告知我们的付款信息（参考编号、金额、币种）。如果你为发票填写公司名称或税号，是在 Stripe 自己的页面上填写的。
我们为何有权保存这些数据
- 为履行与你的合同——没有收件人的地址和你的留言，我们无法送达卡片。
- 我们维持服务正常运行的正当利益——限制请求频率和防止滥用。
- 你的同意——仅限两件事：字幕（因为你选择了录音才会产生），以及营销邮件（即付款前的可选勾选框）。除此之外，这里没有任何处理基于同意，这是有意为之。不使用你提供的地址，我们就无法送达你已付款的卡片；把这称为“同意”会让人以为你可以撤回它却仍然得到所购买的东西。你可以随时撤回营销同意，其他一切照常进行。
- 付款记录以及你在付款前所作确认的记录，会在法律义务要求时保存（税务、会计及消费者保护法规）。
关于收件人
如果你让我们通过邮件寄送卡片，你就是把别人的邮箱交给了我们，而我们只会把它用于一件事：寄送这张卡片。我们不会把它加入任何名单，绝不会向其发送营销内容，也不会再给它写信——除非对方打开了卡片，而你要求我们通知你。付款前的营销可选项只针对你自己的邮箱——你不能替别人订阅，我们也不会把你的勾选视为联系收件人的许可。请只把卡片寄给乐于收到你消息的人。
如果你选择自己分享链接，除了你写在卡片上的名字外，我们不保存任何关于收件人的信息。
如果你收到了不想要的卡片，请给我们写信，我们会删除它，并阻止今后再向你的邮箱发送卡片。
我们保存数据多久
| 内容 | 保存期限 |
|---|---|
| 语音录音 | 90 天，之后自动删除 |
| 录音的字幕 | 以文字形式与卡片记录一同保存 |
| 付款前所作确认的记录 | 与付款记录一同保存 |
| 卡片记录（姓名、邮箱、文字留言） | 保存，以便收件人的链接持续有效 |
| 付款记录 | 按税法要求保存 |
| 联系留言 | 24 个月 |
| 用于限制请求频率的 IP 地址 | 数小时，而非数天 |
| 卡片礼包（邮箱、礼包码、已用额度） | 保存至礼包到期，之后按税法要求保存 |
录音删除后，卡片页面仍可访问；设计和文字留言会保留，音频则不会。
还有谁会处理这些数据
我们只使用少数几家服务商，每家负责一项工作：
- Supabase——数据库和文件存储
- Stripe——支付
- Brevo——发送送达邮件和收据邮件
- Upstash——请求频率限制
- Cloudflare——托管和内容分发
它们按照我们的指示行事，不得将你的数据用于自身目的。
你浏览器自带的语音服务（Chrome 使用 Google，Safari 使用 Apple）不在此列，因为它并不按照我们的指示行事。请参阅下文“字幕，以及你的浏览器如何处理你的声音”。 部分服务商位于你所在国家/地区之外；数据传输依据标准合同条款或充分性认定。
你的语音录音如何受到保护
录音保存在私有存储空间中，无法公开访问。当收件人打开卡片时，服务器会生成一个一小时后失效的临时签名链接。猜中卡片链接并不现实：每个链接都包含一个随机的 128 位令牌。
字幕，以及你的浏览器如何处理你的声音
当你录制留言时，浏览器可能会在你说话的同时把它转写成字幕，让收件人可以边听边看。
这一过程并不在我们的服务器上进行，在大多数浏览器上也不在你的设备上进行。Chrome 和 Safari 实现这项功能的方式，是把音频发送到它们各自的语音服务——分别是 Google 和 Apple——由后者转写后返回文字。我们从不接收这段音频流，也与这两家公司没有任何协议；这是你的浏览器与其自身供应商之间的通信，适用的是该供应商的隐私政策，而非我们的。
在浏览器支持的情况下，我们会请求它直接在你的设备上转写；Firefox 完全不提供这项功能，因此在 Firefox 上不会进行任何转写。
如果你不希望任何内容被转写，请使用 Firefox 录制留言，或在录音前关闭字幕。你的卡片依然可以正常使用，只是没有字幕。语音录音本身只会被发送到我们自己的存储空间，详见上文。
我们如何统计访问量
我们统计页面浏览量以及每天有多少不同的人来访，以了解是否有人找到我们。这不使用任何 Cookie，也不使用第三方分析服务。访客数是一个每天更换盐值的单向哈希值，保存在计数器中——它无法被还原，无法与你关联，也无法用来跨日追踪同一个人。我们不知道你是谁，不建立任何用户画像，也没有什么可以出售。
Cookie 和本地存储
我们不使用任何广告或分析类 Cookie。我们会保存：
- 一个记住你所选语言的 Cookie
- 你的主题偏好（浅色/深色），保存在浏览器的本地存储中
- 一个会话 Cookie，仅供登录管理网站的管理员使用
这些都是严格必要或功能性的。没有什么需要你拒绝，因为没有任何东西在追踪你。
浏览器扩展
如果你使用适用于 Chrome、Edge、Firefox 或 Safari 的 ShareLove 扩展，它会把少量信息保存在你自己浏览器的存储空间里，让下一张卡片更快完成：
- 你的名字和邮箱地址
- 你的礼包兑换码（如果你输入过），直到你选择“Forget”
- 你正在写的卡片：收件人姓名、留言、设计，以及你上传的语音留言的引用
- 你最近制作的五张卡片的链接
- 你为录音选择的麦克风
在你制作卡片、核对兑换码或上传语音留言之前，这些信息都不会传到我们这里。届时我们收到的内容与网站发送的完全相同，详见上文“我们收集哪些信息”。
扩展只连接 sharelove.io，不连接任何其他地方。它无法读取你访问的网页或浏览记录，也不含任何分析工具或追踪器。它申请三项权限：存储（用于上述列表）、剪贴板（用于“复制链接”按钮）以及访问 sharelove.io。它只在自己的录音标签页中、并且只在你录音时使用麦克风，也不会生成字幕。
卸载扩展会删除它保存的所有内容。你安装扩展所用的商店（Google、Microsoft、Mozilla 或 Apple）会依据其自身的隐私政策负责安装和更新。
你的权利
你可以要求我们提供你的数据副本，更正或删除你的数据，限制或反对我们使用你的数据，或将其转交给其他服务商。请发邮件至 support@sharelove.io。我们会在 30 天内回复。
如果你身在欧洲经济区或英国，且对我们的答复不满意，可以向你所在国家的数据保护机构投诉。
儿童
Sharelove.io 不面向 16 岁以下的儿童，我们也不会在知情的情况下收集他们的数据。
变更
如果我们对本声明作出重大修改，会更新页面顶部的日期。已送达卡片的链接将继续有效。
阅读英文版本
The short version
We keep as little as possible. We do not sell your data, we do not run advertising trackers, and we delete voice recordings automatically after 90 days. If you want anything removed sooner, email support@sharelove.io and we will do it.
Sharelove.io ("we", "us") is the data controller for the personal data described here. The legal details of the business behind Sharelove.io are set out at the foot of this page. For anything about your data, write to support@sharelove.io.
What we collect
When you send a card:
- your name and email address
- your recipient's name, and their email address only if you ask us to email the card for you. If you choose to share the link yourself, we never receive their address at all.
- their phone number, if you add one
- the written message you type
- the voice recording you make, if you make one
- the captions for that recording, if your browser produced them
- the design and occasion you choose
- the date and time you gave the two confirmations shown before payment, which we keep as the record that you gave them
- whether you ticked the optional box asking us to email you about new designs, and when. If you left it alone we record nothing — a blank is not a "no" we store, it is simply the absence of consent.
When you pay: we never see or store your card details. Payment is handled entirely by Stripe on their own hosted page. We receive only a payment reference, the amount, the currency and whether it succeeded.
Automatically: your IP address, used to rate-limit our public endpoints so they cannot be abused. It is held for a short window for that purpose only.
If you contact us: your name, email and whatever you write to us.
When you buy a card pack: your email address and, if you give it, your name; the pack code and how many of its credits have been used; which cards were made with it; and what Stripe tells us about the payment (a reference, the amount, the currency). If you add a company name or VAT number for an invoice, you enter it on Stripe's own page.
Why we are allowed to hold it
- To perform a contract with you — we cannot deliver a card without the recipient's address and your message.
- Our legitimate interest in keeping the service working — rate limiting and abuse prevention.
- Your consent — for two things only: captions, which exist because you chose to record, and marketing email, which is the optional box before payment. Nothing else here runs on consent, and that is deliberate. We cannot deliver a card you paid for without using the addresses you gave us, so calling that "consent" would suggest you could withdraw it and still receive what you bought. You can withdraw marketing consent at any time and everything else carries on exactly as before.
- Payment records, and the record of the confirmations you gave before paying, are kept where required by legal obligation (tax and accounting, and consumer law).
A note about your recipient
If you ask us to email the card, you are giving us someone else's address, and we use it for exactly one thing: sending that card. We do not add it to any list, we never market to it, and we never email it again unless they open the card and you asked to be told. The optional marketing box before payment covers your address only — you cannot opt somebody else in, and we do not treat your tick as permission to contact them. Please only send a card to someone who would welcome hearing from you.
If you share the link yourself instead, we hold nothing about your recipient beyond the name you wrote on the card.
If you receive a card you did not want, email us and we will delete it and block further sends to your address.
How long we keep things
| What | How long |
|---|---|
| Voice recordings | 90 days, then deleted automatically |
| Captions for a recording | Kept with the card record, as text |
| Record that you gave the confirmations before paying | Kept with the payment record |
| Card record (names, emails, written message) | Kept so the recipient's link keeps working |
| Payment records | As required by tax law |
| Contact messages | 24 months |
| IP addresses used for rate limiting | Hours, not days |
| Card packs (email, code, credits used) | Until the pack expires, then as required by tax law |
The card page stays reachable after the recording is deleted; the design and written message remain, the audio does not.
Who else processes it
We use a small number of providers, each for one job:
- Supabase — database and file storage
- Stripe — payments
- Brevo — sending the delivery and receipt emails
- Upstash — rate limiting
- Cloudflare — hosting and content delivery
They act on our instructions and may not use your data for their own purposes.
Your browser's own speech service (Google for Chrome, Apple for Safari) is not in this list, because it is not acting on our instructions. See "Captions, and what your browser does with your voice" below. Some operate outside your country; transfers rely on standard contractual clauses or an adequacy decision.
How your voice recording is protected
Recordings are stored in a private bucket. They are not publicly addressable. When your recipient opens their card, the server issues a short-lived signed link that expires after an hour. Guessing a card link is not practical: each one carries a random 128-bit token.
Captions, and what your browser does with your voice
If you record a message, your browser may transcribe it into captions while you speak, so your recipient can read along.
This part does not happen on our servers, and on most browsers it does not happen on your device either. Chrome and Safari implement this feature by streaming the audio to their own speech services — Google and Apple respectively — which transcribe it and send text back. We never receive that audio stream and we have no arrangement with either company; it is your browser talking to its own vendor, under that vendor's privacy policy, not ours.
We ask the browser to transcribe on your device instead wherever it supports that, and Firefox does not offer the feature at all, so no transcription happens there.
If you would rather nothing was transcribed, record your message in Firefox, or turn captions off before recording. Your card still works; it simply carries no captions. The voice recording itself is only ever sent to our own storage, described above.
How we count visits
We count page views and how many distinct people visited each day, so we know whether anyone is finding us. This uses no cookies and no third-party analytics service. The visitor count is a daily-salted one-way hash held in a counter — it cannot be reversed, cannot be linked to you, and cannot be used to follow the same person from one day to the next. We do not know who you are, we do not build a profile, and there is nothing here to sell.
Cookies and local storage
We use no advertising or analytics cookies. What we do store:
- a cookie remembering your chosen language
- your theme preference (light/dark), in your browser's local storage
- a session cookie, only for administrators signing in to manage the site
These are strictly necessary or functional. There is nothing to opt out of because there is nothing tracking you.
The browser extension
If you use the ShareLove extension for Chrome, Edge, Firefox or Safari, it remembers a few things in your own browser's storage, so the next card is quicker:
- your name and email address
- your pack code, if you entered one (until you choose "Forget")
- the card you are writing: recipient's name, message, design, and a reference to a voice note you uploaded
- the links to the last five cards you made
- which microphone you chose for recording
None of this reaches us until you make a card, check a code or upload a voice note. What we then receive is exactly what the website sends, described in "What we collect" above.
The extension connects to sharelove.io and nothing else. It cannot read the pages you visit or your browsing history, and it contains no analytics or trackers. It asks for three permissions: storage (for the list above), clipboard (for the Copy link button) and access to sharelove.io. It uses your microphone only in its recording tab, only while you are recording, and it does not produce captions.
Uninstalling the extension deletes everything it stored. The store you installed it from (Google, Microsoft, Mozilla or Apple) handles installation and updates under its own privacy policy.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or hand it to another provider. Email support@sharelove.io. We will reply within 30 days.
If you are in the EEA or the UK and you are not satisfied with our answer, you may complain to your national data protection authority.
Children
Sharelove.io is not directed at children under 16, and we do not knowingly collect their data.
Changes
If we change this notice materially we will update the date at the top. Card links already delivered will keep working.