Yours To Unlock

Privacy Policy

Last updated 22 October 2026. In short: we collect the minimum needed to make and deliver your gift, we never sell your data, and the gift itself stays private.

Who we are

Yours To Unlock (yourstounlock.com) creates personalised digital gifts. You make a gift on this site, we give you a private link and unlock code, and you share it with someone you love. For any privacy question or request, email us at director@labyrinthpuzzles.com.

What we collect

Buyer details. Your email address — so we can send you the gift link, unlock code and receipt. That is the only personal detail a purchase requires; no account is needed.

Payment details. Payments are handled entirely by Stripe, our payment provider. Your card details go to Stripe and never touch our servers. We receive a confirmation that payment succeeded, the amount, and any promotion code used. Your gift price is £7.99 including VAT.

Gift content. Whatever you put in the gift: your name, the recipient's name, a photo, a voice recording, and your answers to the questions and word puzzles. This is stored to keep your gift link working.

Technical records. Standard server logs (such as request times and error records) kept briefly for security and reliability. We do not use advertising or tracking cookies.

What stays private

Gifts are not public. A gift can only be opened through its private link or its unique unlock code, and the files inside (photos, voice recordings) are stored privately and only shared through signed, temporary links generated for that gift's page. We do not display, publish or share gift content anywhere else on the site.

Who we share data with

Only the providers needed to run the service: Stripe (payments), our email provider (sending you the gift link and receipt) and our hosting and storage provider (serving the site and holding gift files). We never sell personal data, and we do not share it with advertisers.

How long we keep things

Gift content is kept while the gift link remains active. Payment records are kept for as long as UK tax and accounting rules require (currently six years). Server logs are kept for a short period only. You can ask us to delete a gift — or your email from our records — at any time using the address above.

Your rights

You can ask us for a copy of your personal data, correct it, delete it, or object to how we use it. If you are in the UK or EU you also have the right to complain to the Information Commissioner's Office (ico.org.uk). We respond to every request, usually within a few days.

Security

The site runs over HTTPS, gift files live in private storage, and payment data is handled by Stripe, which is certified to the highest card-industry security standard (PCI DSS Level 1).

Changes

If this policy changes we will update the date at the top of this page. Material changes will be flagged on the site before they take effect.