Last updated July 20, 2026

Privacy policy

My Digital Bouquet is a free, no-account creative tool. We collect only what is needed to create an unlisted bouquet link, prevent abuse, and understand whether the tool works.

What a bouquet stores

When you create a share link, we store the selected flower and arrangement IDs, recipient name, message, sender name, creation time, and moderation status in Cloudflare D1. An unfinished draft stays in your browser’s local storage until you clear it or replace it.

Unlisted does not mean encrypted

Bouquet URLs are designed to be difficult to guess and are excluded from the public sitemap, but anyone with a link can open it. Links are not passwords, encryption, or access control. Do not include financial, medical, legal, identity, or other sensitive information.

Abuse prevention

Cloudflare Turnstile checks bouquet creation for automated abuse. We derive a one-way HMAC digest from the connecting network address for hourly and daily creation limits; the raw address is not written to the D1 rate-limit table.

Analytics

On the production site, privacy-limited Google Analytics events may record actions such as starting the maker, completing a bouquet, or choosing a sharing platform. Analytics events never include the recipient name, sender name, card message, bouquet ID, or bouquet URL.

Retention and removal

The MVP does not automatically expire active bouquets. We may disable or delete records to handle abuse, legal requests, operational maintenance, or a valid removal request.

Your choices

You can use the maker without an account. You may stop before creating a link, clear site data to remove the local draft, or request removal of a shared bouquet by contacting abuse@mydigitalbouquet.com with its URL.

Contact

Privacy questions can be sent to hello@mydigitalbouquet.com.