Last updated: 8/20/2025
1. Information We Collect
We collect information you provide directly to us when using Sar Poh's two main features:
Virtual Gifts Feature
- Multimedia content: Images (up to 8MB, formats: JPG, PNG, GIF, WebP), audio files (up to 13MB, formats: MP3, WAV, OGG)
- Text messages and gift configurations (templates: Mini, Standard, Plus)
- Animation preferences and gradient color selections
- Gift access passcodes and sharing preferences
Anonymous Messages Feature
- Display names and descriptions for message links
- 4-digit passcodes for dashboard access
- Anonymous message content (up to 1000 characters)
- Optional sender names (when users choose to identify themselves)
- Message read status and timestamps
Technical and Analytics Data
- Device information (browser type, IP address, device identifiers)
- Usage analytics via Google Analytics (with cookie consent)
- Contact form submissions (name, email, subject, message, newsletter preferences)
- Short URL generation and click tracking data
- Secure authentication data for platform access
2. How We Use Your Information
We use the information we collect to provide and improve our dual-feature platform:
Core Service Operations
- Process, store, and serve your virtual gifts with multimedia content
- Generate QR codes and short URLs for easy gift sharing
- Facilitate secure anonymous message delivery and dashboard access
- Maintain passcode-protected dashboards for message management
- Enable secure file uploads and storage for optimal performance
Platform Management
- Provide secure authentication and dashboard functionality
- Process contact form submissions and newsletter subscriptions
- Generate usage analytics to improve user experience (with consent)
- Track gift creation patterns and anonymous message engagement
Security and Compliance
- Ensure secure storage and transmission of all user content
- Prevent unauthorized access to anonymous message dashboards
- Maintain system security and prevent fraudulent activities
- Comply with legal obligations and respond to valid legal requests
3. Information Sharing and Disclosure
We do not sell, trade, or otherwise transfer your personal information to third parties, except in the following circumstances:
- When you explicitly choose to share your virtual gifts with others
- When anonymous messages are delivered to intended recipients through secure links
- To comply with legal requirements or court orders
- To protect our rights, property, or safety
- With service providers who assist in operating our platform
- In connection with a business transfer or acquisition
4. Data Storage and Security
We implement comprehensive security measures to protect your information:
Secure Storage
- Virtual gift media files are stored securely with redundancy and backup systems
- Database information stored with encryption at rest
- Authentication and session data managed with industry-standard security protocols
- All passwords are securely hashed with strong encryption
Access Controls
- Anonymous message dashboards protected with 4-digit passcodes
- Gift access controlled through unique, secure identifiers
- Platform areas secured with multi-layer authentication
- API endpoints protected with proper authorization controls
Data Transmission
- All data transmitted over HTTPS with TLS encryption
- File uploads processed with size and type validation
- Request timeout protection and retry mechanisms for reliability
- Security policies properly configured for secure data exchange
While we implement industry-standard security measures, no method of transmission over the internet is 100% secure. We continuously monitor and update our security practices to protect your data.
5. Data Retention
Our data retention practices are designed to balance service functionality with privacy protection:
Virtual Gifts Data
- Gift content and multimedia files: Retained indefinitely while the gift remains active
- Inactive gifts may be archived after 2 years of no access
- Gift passcodes and configurations: Stored as long as the gift exists
Anonymous Messages Data
- Message content: Retained indefinitely while the message link is active
- Dashboard passcodes: Stored permanently to ensure continued access
- Message read status and timestamps: Maintained for dashboard functionality
Analytics and System Data
- Google Analytics data: Retained according to our analytics settings (26 months)
- Contact form submissions: Kept for 3 years for customer service purposes
- Short URL click data: Maintained for statistical analysis
- Authentication logs: Retained for 1 year for security purposes
You may request deletion of your data at any time by contacting us. We will honor deletion requests while considering legal requirements and legitimate business needs.
6. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience. Our cookie consent system allows you to control your preferences:
Essential Cookies (Always Active)
- Session management for secure authentication
- Security protection tokens for form safety
- Cookie consent preferences storage
- Basic functionality and navigation state
Analytics Cookies (Optional - Requires Consent)
- Google Analytics for website usage analysis
- User interaction tracking (gift creation, message sending)
- Page view analytics and user journey mapping
- Performance monitoring and error tracking
Cookie Management
- You can change your cookie preferences at any time via our cookie banner
- Browser settings allow you to block or delete cookies manually
- Disabling certain cookies may affect website functionality
- We respect "Do Not Track" signals when analytics cookies are disabled
7. Your Rights and Choices
You have the right to:
- Access and review your personal information
- Correct inaccurate or incomplete information
- Request deletion of your data
- Object to certain processing activities
- Withdraw consent where applicable
- Request data portability
8. Children's Privacy
Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with this privacy policy and applicable laws.
10. Changes to This Privacy Policy
We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of our service after changes are posted constitutes acceptance of the updated policy.
11. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us through our website or support channels. We are committed to addressing your concerns and ensuring your privacy rights are protected.
12. Legal Basis for Processing
We process your personal information based on various legal grounds, including your consent, contractual necessity, legitimate interests, and legal obligations. For more details about your rights and obligations, please review our Terms of Service. We will always ensure that our processing activities are lawful and transparent.