NOTEFETTI · UPDATED SEPTEMBER 24, 2026
Your memories.
Handled with care.
Notefetti is operated by CloudKeyConsulting LLC. Contact Notefetti support for privacy, purchase, accessibility or removal help.
What the service does
An adult organizer creates one birthday gift, invites contributors and reviews their messages and photos. A free mini gift can publish up to 5 approved messages with photos, without a card, and is available for 30 days from creation. You may collect and preview up to 30 messages before choosing a plan. The optional $19 one-time upgrade covers up to 30 contributions, one photo per contribution, one published gift, printing and a downloadable HTML keepsake. Taxes may apply at checkout. This first edition does not include video, automatic reminders, translation or physical delivery. Contributors are free.
What we store and why
We store the recipient’s display name, organizer’s display name, celebration, deadline, dedication, submitted names, messages, resized photos, approval state and dates to provide your gift. Access keys are stored as cryptographic hashes on the server. Your browser stores the organizer key and shared links so you can return; use “Forget this device” on shared computers. Infrastructure request data is processed by Cloudflare. We use a daily hashed IP identifier for short-lived abuse controls, not advertising profiles. There are no advertising pixels or third-party analytics scripts in the app. We count public homepage visits by day and a fixed campaign code for up to 90 days. We also keep aggregate counts of homepage preview and setup steps, referral-preview requests, sample clicks, validation or creation failures, and optional fixed-choice feedback for up to 90 days. These counters contain only the day, campaign, flow version and a fixed event or reason code—not what you type, a visitor ID, or free-text feedback. Session storage limits repeat counting in the same tab; feedback is optional and never required to create a gift. We also associate a campaign code and first guest-contribution date with a gift to understand whether our marketing is useful; these records are deleted with the gift. We do not include private links, names, messages, photos or referrer URLs in visit counters. Session storage remembers the campaign and avoids counting repeat homepage loads in the same tab. A message typed into the homepage preview stays in the current page until you create the gift; it is then saved as the organizer’s first approved message. Refreshing before creation may lose it. When you start a new gift from a contribution or recipient page, the new recipient name is carried once through session storage in the same tab, expires for reuse after 15 minutes, and is removed when the homepage reads it. No content from the previous gift is copied. We record the first free-publication date separately from payment records, so a free gift is never counted as a purchase. This record is deleted with the gift. Existing gift and payment records let us measure purchases and refunds; there is no cross-site tracking. After a published gift renders in a visible browser tab, we also record one first-opening timestamp for that gift. We skip browsers that remember organizer access. This signal does not identify the viewer or prove that the intended recipient read the gift; an organizer using another device may also count. The timestamp is deleted with the gift, and no message content, private link or visitor identity is stored in this opening record.
Private by link
Gift pages are not listed in a public gallery or intended for search indexing. This is not end-to-end encryption. Anyone with the organizer link can control a gift; anyone with the recipient link can see approved messages after publication. Contributors can submit but cannot browse other contributions. Keep links private. Organizers can replace shared links, making previous links stop working. Contributors receive a separate private removal link that remains usable if the organizer replaces invitation links.
Permissions and acceptable use
Organizers and contributors must be 18 or older. Use only messages and photos you have permission to share, including permission from a child’s parent or guardian for a child’s photo. Do not upload sensitive identity documents, financial records, explicit content, threats, harassment, unlawful material or someone’s private information without consent. Keep the recipient’s surprise respectful. You retain ownership and grant us the limited permission needed to store, resize and display your contribution to deliver the gift.
Photos
The app resizes photos to a JPEG before upload, which removes the original photo’s location metadata. Uploaded photos are limited to approximately 194 KB. The keepsake is intended for screens and ordinary home printing, not professional large-format photo printing.
Retention, deletion and backups
Free drafts and published mini gifts are available for 30 days from creation. Unlocked drafts are available for one year after purchase verification. Published paid gifts are hosted for one year from first publication. Gift access ends at expiry; expired records are removed during service cleanup. Organizers can immediately delete a gift from the active service. Contributors can use their saved removal link or ask the organizer. Cloudflare infrastructure backups may temporarily retain deleted data for their normal recovery period. Previously downloaded or printed copies are outside our control. Download your keepsake before hosting expires.
Purchases and refunds
Checkout is provided by Stripe when enabled. We do not receive or store your full payment card details. We retain a checkout reference, payment reference and status to unlock one gift per purchase. We send Stripe a non-secret gift identifier, not your private dashboard link or gift content. Earlier Gumroad purchases retain their purchase ID and hashed license identifier. Request a refund within 30 days by emailing the support address above with your receipt. Refunded or reversed purchases may lose paid access. Refunds are handled through the original payment provider; no recurring subscription is created.
Recovery and availability
No account is required. Save your organizer link: we cannot recover a lost secret link. Save a downloaded keepsake too. The first release has limited capacity; gift creation or uploads may be temporarily unavailable. We will respond to delivery problems and refund requests at the address above. We do not promise permanent hosting or uninterrupted availability.
Privacy requests and concerns
For access, correction, export or deletion, first use the organizer controls or your contribution removal link. If you need help, contact us with the non-secret gift identifier and enough context to locate the request. Do not email an organizer secret link unless you intend to grant access. We may need to verify that you are entitled to the requested data. We do not sell your gift content or use it to train an AI model.