Privacy policy

Last updated: 1 September 2026

This is the short version: we store what is needed to show your page to the person you send it to, to tell you when they open it, and to let you edit it later. We do not sell data, we do not run ads, and the most sensitive thing you might give us, a chat export, never leaves your browser.

Who we are

Longlove is operated by a sole trader registered in Latvia, in the European Union. For the purposes of the GDPR we are the data controller for the personal data described on this page. You can reach us at hello@longlove.app.

What we store, and why

Page content

Everything you put on a page: titles, the letter, reasons, dates, photos, videos, voice notes, song links, quiz questions, and the settings you choose (format, theme, password, unlock date). We store it so the page can be shown to whoever has the link, and so you can edit it later. Photos and media are stored in our storage provider in the EU.

Your email address

We ask for an email when you publish. We use it to send your edit link, your receipt, a notification when the page is opened, a notification when the recipient replies, a reminder before a free preview expires, and, if you gave us a relationship start date, a reminder before your next anniversary or monthsary. Every reminder email has an unsubscribe link. We do not send newsletters.

Replies

If the recipient writes back or records a voice note, we store the text or audio with your page and email it to you. The recipient can see a note above the reply box saying that their reply goes to you and is stored on Longlove.

Opens

When a page is opened we record the time and a short, one-way hash of the browser type, so we can tell you it was opened and avoid counting the same device twice. We do not store the recipient's IP address with the open, and we do not track them across other sites.

Chat exports (chat insights block)

The WhatsApp export you select for the chat insights block is parsed entirely inside your browser. The file itself is never uploaded. Only the aggregate results (message counts, most active hours and days, most used words and emoji, longest streak) are saved to your page. If you delete the block, the aggregates are deleted with it.

AI portraits

To generate a couple portrait we send the photo you upload to our image generation provider, along with the style you chose. The provider processes it to produce the image and does not keep it afterwards. The portraits you decide to keep are stored with your page; the ones you discard are deleted. We do not use your photos to train any model, and we do not generate portraits of children.

Payments

Payments are handled by our payment processor, which acts as the merchant of record. Your card number goes to them, never to us. We keep the order ID, the amount, the currency, and the email used to pay, so we can match the payment to your page and handle refunds.

Drafts

While you build, your draft lives in your browser's local storage. Nothing is sent to us until you create a preview link or publish.

Cookies and analytics

Password cookie. If a page has a password and the recipient enters it, we set a cookie so they do not have to type it again on that device. It contains a signed token, not the password.
Analytics (optional). We use PostHog to count visits and to see where people get stuck in the editor. It is configured without advertising features. We do not run analytics on published love pages themselves, only on the marketing site and the editor. If you have "Do Not Track" or a content blocker enabled, analytics simply does not load.
No advertising cookies. We do not use ad networks or third-party tracking pixels.

How long we keep things

Unpaid previews and drafts are deleted 30 days after they were created, including any uploaded photos.
Published pages are kept until you delete them. There is a delete button on your edit link, and you can also email us.
Opens and replies are kept for as long as the page exists and are deleted with it.
Email delivery logs are kept for 90 days by our email provider for troubleshooting.
Payment records are kept for as long as Latvian accounting law requires, which is currently 5 years.

Who can see your page

Only people who have the link. Pages are not listed anywhere on Longlove and carry a "noindex" instruction so search engines do not add them to results. You can add a password for an extra layer. Please remember that anyone the recipient forwards the link to can also open it, unless you set a password.

Who we share data with

We do not sell or rent personal data. We use a small number of service providers to run Longlove: hosting, database and file storage, email delivery, payment processing, analytics, and AI image generation. Each of them processes data only on our instructions and under a data processing agreement. Where a provider is outside the EU, transfers rely on the European Commission's standard contractual clauses or an adequacy decision.

Your rights

Under the GDPR you can ask us to show you the data we hold about you, correct it, delete it, give you a copy in a portable format, or stop processing it. The quickest route for deletion is the delete button on your edit link. For anything else, email hello@longlove.app from the address you used and we will respond within 30 days. If you are unhappy with how we handled a request you can complain to the Latvian Data State Inspectorate (Datu valsts inspekcija) or the supervisory authority in your own country.

If you are the recipient of a page and want it taken down, email us with the link. We will contact the sender and, if the content is about you, remove it.

Children

Longlove is for adults. We do not knowingly accept pages from anyone under 16, and we refuse to generate AI portraits where the uploaded photo appears to show a minor.

Changes

If we change this policy in a way that matters, we will email everyone with a published page before the change takes effect. The date at the top tells you when it was last updated.