Privacy policy
Effective October 31, 2026
hologram (makehologram.com) turns your photos into an interactive scene you can send as a gift. This page explains what we collect, why, who else handles it, and how to have it deleted. We don’t sell your information, show ads, or use it to track you across other sites.
What we collect
Gifts you make
The photos you upload, and the names and message you add. Before a photo leaves your device, your browser resizes it and re-saves it as a new image, which removes its metadata, including where it was taken. We store the gift so its link keeps working.
Anyone who has a gift’s link can open it. Links are long and random, are not listed anywhere on the site, and are marked so search engines don’t index them. Share a link only with people you want to see the gift.
Requests for scenes made by hand
The photos, names and messages you include, your message to us, and your email address if you give one. We use them only to make the scene you asked for. When you send the request, its details are emailed to our team; the photos stay in our storage. If the template was shared by a creator, that creator makes the scene: they see the photos, names and messages, but never your email address or your account.
Payments
When you pay for a template, Stripe collects your card or other payment details on its own secure form, and we give it your email address for the receipt. We never see or store your full card number. We keep a record of each order: what you bought, the price, when you paid, its status, and Stripe’s reference for it, so we can deliver what you paid for and answer questions about it.
Your account
Opening a gift never needs an account. Sending one, or a request, needs you to sign in, with Google or with a code we email you. When you sign in with Google, Google tells us your name, email address and a Google account ID; we ask for nothing else from your Google account and never see your Google password. When you sign in with a code, we keep your email address, and the code only until it’s used or expires. We use them to keep the gifts and requests you save to your profile, and to email you when a scene you asked us to make is ready.
Your profile and posts
If you choose a username, it shows on your profile with the name and picture you add there, the number of people who follow you and you follow, and the scenes you post. Your Google name and email address are never shown. Each scene you make starts private: only people you send its link to can open it. You can share it to the community from your profile, which shows it on your profile and in the community. A post shows the title you give it and the scene with your photos, never the gift’s link. For a template you filled in, it never shows the note or names you added; a scene we made by hand shows as we made it. On a private profile, only followers you accept see your posts. You can change who sees a post, or remove it, at any time from your profile.
How the site is used
To learn whether hologram works for people, we record simple events ourselves, such as a page being viewed on our public pages, a gift being opened, the seal being tapped, or a step toward making or buying a scene (signing in, sending the form, opening the payment form, paying). Each record has the event, the kind of page, the scene, the gift, the price shown or paid, the country your connection comes from, whether you were signed in, and a random ID your browser makes for this purpose; the first page of a visit also notes the site you came from (only its address, such as google.com) or the campaign in the link. These records don’t include names, email addresses or photos, and aren’t tied to your account.
We also use Google Analytics on our public pages (the home page, Explore scenes, template, occasion and community pages, Flow, For events, the page where you make a scene, this policy and our terms) to see how people find and use the site: which pages you visit, the site you came from, your approximate location, and your device and browser. It never runs on a gift’s page, your profile or our team’s pages, so Google never sees a gift’s link, photos, names or message, and we remove anything private from the page addresses it receives. In the European Economic Area, the UK and Switzerland it runs without cookies. Its advertising features and Google signals are off. You can opt out with Google’s browser add-on.
Like any website, our hosting provider sees your IP address when you visit. We use it to keep the service running and to limit abuse, such as too many uploads at once, and our request logs are deleted after a few days. A gift or request you start without signing in keeps a one-way hash of your address for that day only, to limit how many can be started; it’s removed when you send it, and unsent ones are deleted within a day.
Cookies and storage in your browser
We use cookies only for signing in: one holds your session, one tells our pages you’re signed in, and a short-lived one protects the sign-in step itself. Your browser’s local storage keeps the keys that let you manage or delete the gifts you made, the requests you sent, and the random ID mentioned above. Until you send a request, the make page also keeps what you put on its form, photos included, in your browser’s storage, so a reload doesn’t lose it; it never leaves your device until you send it, and it’s cleared once the request is sent or after 30 days. Outside the European Economic Area, the UK and Switzerland, Google Analytics sets its own cookies on our public pages (_ga and _ga_…), which tell repeat visits apart for up to two years; they’re not used for advertising. We don’t use advertising cookies.
Who else handles your information
- Cloudflare hosts the site and stores gifts, requests and accounts, and delivers request emails to us.
- Stripe processes payments. It receives your payment details and email address when you pay, and handles them under its own privacy policy.
- Neon hosts the database that keeps our order records.
- Resend sends the sign-in codes we email.
- Google handles signing in with Google and runs Google Analytics on our public pages (see above).
Apart from the creator who makes a scene you asked for (see above), we share information with no one else, unless the law requires it.
How long we keep it
- Gifts stay until you delete them. Deleting a gift removes its photos, names and message right away, and its link then says it was removed.
- Unfinished uploads, gifts or requests never sent, are removed within about a day. The exception is your latest unsent request for a template, once you’ve signed in to make, send or pay for it: it stays in your account, so you can pick it up again without adding your photos and words again, until you ask us to delete it.
- Requests stay so the finished scene can appear in your profile, until you ask us to delete them.
- Order records are kept for as long as we need them for our accounts and taxes, even if you delete the gift.
- Sign-in sessions end after 90 days, or when you sign out.
- Usage events are kept to understand how hologram is used over time.
- Google Analytics data is kept by Google for up to 14 months.
Your choices
You can delete any gift you made from your profile. To see what we hold about you, or to delete your account, your requests or anything else, email privacy@makehologram.com and we’ll take care of it. You can also remove hologram’s access in your Google account’s security settings.
Children
hologram isn’t meant for children under 13, and we don’t knowingly collect their information. If you believe a child has given us information, email us and we’ll delete it.
Keeping it safe
Everything travels over HTTPS. Photos are stored privately and served only through gift links, and through posts to the people allowed to see them. The keys that let you manage a gift, and your sign-in sessions, are stored only as one-way hashes.
Changes
If we change this policy, we’ll update this page and its date. If a change affects information you’ve already given us in a meaningful way, we’ll let you know on the site.
Contact
Questions about privacy: privacy@makehologram.com.