Last updated: 31 August 2026
HeartSpark (https://sendheartspark.com) is a digital surprise-link service operated from India. This policy explains what we collect, why we collect it, what we do not collect, and how cookies and analytics work on our public website.
Information you provide
- Names, messages, occasion choices, and optional photos you upload to create a Spark
- A mobile number at paid checkout — required by our payment partner to process INR payments
- Support emails you send to support@sendheartspark.com
Information collected automatically
- Open status (Plus & Max only): when enabled, we record the first time a paid Spark is opened so the creator can see that it was viewed. The recipient sees a disclosure before opening.
- Basic server logs: standard request metadata for security and abuse prevention (for example, timestamps and error logs). We do not sell this data.
- Website analytics (with consent): if you accept analytics cookies, we use Google Analytics 4 to understand aggregate product usage. We do not send message content, recipient names, or private Spark URLs to analytics.
- Marketing measurement (with consent):if you accept marketing cookies, we use the Meta Pixel (and may use Meta's Conversions API from our servers for confirmed purchases) to measure campaign performance. We do not send Spark message content to Meta.
Cookies and consent
We use Cookiebot to manage cookie consent. Necessary cookies support security, checkout, and core site function. Analytics and marketing cookies are off until you choose otherwise. You can change your choice at any time via in the footer or below.
- Necessary: session/security state required for the product and payment flow
- Analytics: Google Analytics 4 (measurement ID configured in our environment)
- Marketing: Meta Pixel for advertising measurement
What we do not collect
- GPS or precise location
- Contact lists from your phone
- Cross-site advertising profiles without consent
- Device fingerprinting for ad targeting without consent
How we use information
- Deliver and store your Spark until its tier storage window ends
- Process one-time INR payments through Cashfree (sandbox until live activation is separately approved)
- Send transactional email when a verified creator email exists and email is configured
- Prevent abuse, fraud, and payment tampering
- Respond to support requests
Service providers
We use trusted processors to run HeartSpark:
- Vercel — website hosting
- Supabase — database and private media storage
- Cashfree — INR payment processing
- Resend — transactional email delivery from our domain when enabled
- Google Analytics — consent-gated website analytics
- Meta — consent-gated marketing measurement (Pixel and optional Conversions API)
- Cookiebot — cookie consent management
Sharing
We share payment data with Cashfree Payments to process transactions. We do not sell personal information. We may disclose data if required by law.
Retention
Free, Lite, Plus, and Max Sparks have different storage windows shown at purchase. After expiry, links may stop working and content may be deleted.
Your choices
Do not share a Spark link with people you do not trust. Reject non-essential cookies if you prefer. For deletion requests, email support@sendheartspark.com with the Spark link or creator manage details you received at checkout.
Contact
Questions: support@sendheartspark.com