Privacy Policy
What we collect, and why
Last updated August 5, 2026
This policy explains what Heart Note collects when you use this website or order a song, why we collect it, who else sees it, and how to ask us to delete it. We have written it in plain English rather than legal language.
Heart Note is operated by [LEGAL ENTITY NAME], [MAILING ADDRESS]. If you have any question about this policy, email paul@heartnote.music.
What we collect
What you type into the order form
To write your song we need to know about the person it is for. That means:
- The occasion, and who the song is for
- Your name, so they know who it is from
- The story you write about them, anything you ask us to include, and any other notes
- Your preferred style of music, and a voice if you choose one
The story you write is the most personal thing we hold. It often contains names, dates, and details about people other than you. We use it only to write and produce your song, and to answer you if you contact us about your order.
Payment and contact details
Payment is handled entirely by Stripe. You enter your card details on Stripe's own checkout page, not ours. We never see or store your card number. Stripe passes us your email address and name so we can send your song and your receipt.
Information collected automatically
When you browse the site we record which pages you view, where you arrived from, roughly which advertisement or campaign brought you, whether you are on a phone or a computer, and a random identifier for your visit. We use this to understand which pages work and which do not.
Cookies and similar storage
| Name | Set by | Purpose |
|---|---|---|
| hn_sid | Heart Note | A random identifier so we can count a visit once rather than many times. Not linked to your name. |
| hn_attr | Heart Note | Remembers which advertisement or link brought you, so we know which ones work. |
| hn_atc_sent | Heart Note | Stops one visit being counted twice. |
| _fbp, _fbc | Meta | Set by the Meta advertising tools so Meta can tell whether an advertisement led to a purchase. |
Our own storage stays in your browser and can be cleared at any time through your browser settings. The Meta cookies are governed by Meta's own privacy policy.
Who else sees your information
We do not sell your information, and we never share the story you wrote with anyone outside the people producing your song. We do rely on these companies to run the business:
| Company | What they do | What they receive |
|---|---|---|
| Stripe | Takes payment | Your name, email, card and billing details |
| Supabase | Stores orders and finished songs | Your order, including the story you wrote |
| Resend | Sends our emails | Your email address and the message |
| Vercel | Hosts the website | Your IP address, in ordinary server logs |
| Meta | Measures our advertising | Cookie identifiers, and a scrambled version of your email |
| Google Fonts | Supplies the typefaces | Your IP address, when the page loads |
About the scrambled email
When you buy, we tell Meta that a purchase happened so we know which advertisements are worth paying for. Your email is turned into an irreversible string of characters before it is sent, so Meta cannot read your address, but it can match it against an account it already holds. If you would rather we did not do this at all, email us and we will exclude you.
How long we keep it
- Your order and your song. Kept while your private song page is live, so you can return to it. Ask us and we will delete both.
- Payment records. Kept by Stripe, and by us in summary, for as long as tax and accounting rules require.
- Website analytics. Kept in a form that is not tied to your name.
Your rights
Wherever you live, you can ask us to:
- Tell you what we hold about you
- Correct anything that is wrong
- Delete it
- Send you a copy
- Stop using it for advertising measurement
Email paul@heartnote.music and we will respond within 30 days. We will not charge you or treat you differently for asking.
If you are in the United Kingdom or the European Economic Area, you also have the right to complain to your local data protection authority. If you are in California, we confirm that we have not sold or shared personal information for money in the past twelve months.
Children
Heart Note is meant for adults buying gifts. We do not knowingly collect information from anyone under 16. If you believe a child has given us information, email us and we will remove it.
Where your information is held
Our suppliers store data in the United States. If you order from outside the United States, your information will be transferred there, protected by the standard contractual terms those companies operate under.
Changes
If we change how we handle your information we will update this page and change the date at the top. Material changes will be mentioned in an email to recent customers.
Getting in touch
[LEGAL ENTITY NAME]
[MAILING ADDRESS]
paul@heartnote.music
See also our Terms & Refund Policy.