Privacy policy

1. Who is responsible for your data

WIL TRADE SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, Poland, KRS 0000970413, registry court Sąd Rejonowy w Białymstoku, XII Wydział Gospodarczy Krajowego Rejestru Sądowego, share capital PLN 100,000.00 — contact: support@writeasongfor.me.

2. What we collect

Your email, the names and stories you type into the quiz, your payment confirmation (card details stay with Stripe), and ad-measurement cookies and visit data (Meta pixel, PostHog).

After you pay, you can answer an optional question, “How did you hear about us?”, and add a short note. We keep your answer, and whatever you type in that note, in our site analytics (PostHog).

3. Why we use it

To make and deliver your song (contract), to answer you, and to measure which ads bring visitors.

We email you a link to your preview and, unless you unsubscribe, up to three notes about that song over the following week, based on our legitimate interest in direct marketing (Article 6(1)(f) GDPR and recital 47), with an unsubscribe link in every email.

If you ask us to remind you before the day your song is for, we keep that date and email you once, a few days before it, with the link to your song — because you asked (Article 6(1)(a) GDPR). You can unsubscribe in that email.

When we measure visits, Meta and PostHog receive the address of the page you are on without its private parts: order numbers, payment session IDs, song and gift page links, and song credit codes are removed first.

When you buy, our server tells Meta about the purchase — your email address in hashed form, your IP address, your browser, our and Meta's visitor IDs and, if you came from a Meta ad, the ad's click ID — so we can measure our ads.

When you send a gift page link in a chat or social app such as iMessage, WhatsApp, Messenger, Instagram or X, the app shows a preview with the name of the person the song is for, so Apple, Meta or X receive that name and may keep a copy of the preview.

4. Who helps us

These companies process personal data for us, each only to do its part:

• Stripe — payments; your card details go to Stripe, not to us. Transfers to the US: EU-US Data Privacy Framework and Standard Contractual Clauses.
• ElevenLabs — the music and the singing voice, and the voice that reads the name aloud before you pay. Transfers to the US: Standard Contractual Clauses.
• OpenRouter, which passes our requests to Anthropic — the lyrics, the check of what you wrote in the quiz, and how the name is spelled for singing. Transfers to the US: Standard Contractual Clauses.
• Resend — sending our emails. Transfers to the US: EU-US Data Privacy Framework and Standard Contractual Clauses.
• Cloudflare — hosting the site, storing your songs and orders, and Turnstile, its check that a visitor is not a bot. Transfers to the US: EU-US Data Privacy Framework and Standard Contractual Clauses.
• PostHog — measuring how people use the site. We use PostHog’s EU Cloud, hosted in Frankfurt.
• Cloudflare Email Routing and Google (Gmail) — our support mailbox: mail you send to support is forwarded to a Gmail inbox. Transfers to the US: EU-US Data Privacy Framework and/or Standard Contractual Clauses.

Meta is not our processor. For the Meta Pixel and for the purchase our server reports to Meta (section 3), we and Meta Platforms Ireland Limited are joint controllers under Article 26 GDPR of collecting this data and sending it to Meta. We have agreed with Meta Ireland that we give you this information and that Meta Ireland handles your rights under Articles 15–20 GDPR for the data Meta stores after it receives it. How Meta then uses the data, its legal basis and how to exercise your rights with Meta: Meta’s Privacy Policy. Meta Ireland transfers data to Meta Platforms, Inc. in the US under the EU-US Data Privacy Framework.

5. How long we keep it

Songs, gift pages and download links are deleted 90 days after delivery.

Your quiz answers and stories, your previews and your email address are kept while we need them for your order, a fix, a refund or a “song for later” credit. Write to support@writeasongfor.me and we delete them.

Payment records are kept for the period accounting law requires.

To limit free previews, we keep a hashed form of your IP address for 7 days.

6. Cookies

Essential cookies run the site. The Meta pixel and PostHog also set cookies and identifiers on your device to measure which ads bring visitors; you can block or delete them in your browser's settings.

If your preview is delayed and you haven't given us your email, we save a link to it in your browser on this device so you can come back to it. We remove it once the preview is ready or you open it.

When you make a preview, we also save a link to it in your browser so you can come back to it: in that browser tab while the tab keeps its history, and on this device for 48 hours. We remove the 48-hour link when you next open our site after that time, when you next open the quiz or your song after you have bought it, or right away if you start a new song.

Our site may set Meta's visitor ID cookie (_fbp) on Meta's behalf just before the Meta pixel loads, so the pixel and our server use the same ID.

The gift page you share with the person the song is for loads no analytics or advertising tools at all, so it sets no such cookies and asks for no cookie choice.

7. Your rights

You have the right to access your data, to have it corrected, to have it deleted, to restrict how we use it, to receive it in a portable form, and to object to how we use it. You can block or delete ad-measurement cookies in your browser's settings at any time. To use any of these rights, write to support@writeasongfor.me.

You can also complain to the Polish data protection authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), or, if you live in the UK, to the Information Commissioner’s Office (ICO).

8. For visitors in the United States

Effective date: 26 October 2026. This section adds to sections 1–7 for visitors in the United States.

On every page of our site except the gift page, three tools collect information about your visit. The Meta pixel and PostHog load for every visitor and store on your device a visitor ID and, if you came from an ad, Meta's click ID and the ad's tags, to measure which ads bring visitors; PostHog's session recording and automatic click capture are off. Stripe.js, Stripe's payment script, loads after the page so that Stripe can help prevent fraud, and Stripe receives information about your device and how you use the page.

Meta and Stripe may combine what they collect on our site with what they collect on other websites and apps, under their own privacy policies.

How We Respond to Do Not Track Signals

Some browsers can send a “Do Not Track” signal. Our site does not change what it does when it receives one: the Meta pixel, PostHog and Stripe.js load and work the same way. You can block or delete their cookies in your browser's settings.

If we change this policy, we post the new version on this page with a new effective date. Questions: support@writeasongfor.me.