We store what you submit (name, message, link, colour, emoji, amount, day) and the email address from your payment receipt, used only for receipts and to contact you about your bid. Payments are processed by Stripe; we never see your card details. We use cookie-free analytics. After a payment we set one functional cookie in your browser so you can raise your own claim without the email link; it holds no personal data and expires in 30 days. A gift recipient's email is used once, to send the certificate, and then only to reply if they write to us. You may ask us to delete your email at any time; displayed names, messages, links, colours, emoji and amounts are public and may appear in feeds, embeds, overlays, streams and screenshots; they remain part of the public record unless they break the rules.