Privacy
The short version: your photo never leaves your phone. There is no account, no sign-up, and we never ask for your name, email or number. We measure which parts of the site get used — never what you write, or who you make it for.
Your photo and your words
Everything in the maker happens inside your browser. The photo you pick is read, edited and saved by the browser itself. There is no upload — the site has nowhere to send a photo to, and no server that could receive one. The same goes for the caption you type and the image you download.
When you tap Share, your phone hands the finished image to whichever app you choose. What happens after that is between you and that app.
What stays on your device
A few small values the browser keeps for you. We do not send these anywhere:
-
rakhi:text-hint-seen— so the drag-to-move tip stops appearing once you have seen it -
wish:…— carries a wish you tapped on the Wishes page into the maker; cleared when you close the tab -
rakhi:session— a random id, created only if you use AI suggestions, so those can be rate-limited; it is not tied to you -
PostHog id— a cookie and a stored value used for the counting described below
You can clear all of them at any time from your browser's settings for this site.
How we count usage
We use PostHog to see how many people visit and which features actually get used — whether people find the frames, whether they finish an image, which language they read in. Without it we would be guessing.
What is sent: the page you are on, named events for the features you tap, your device type, browser, operating system, screen size, the site you arrived from, any campaign tag in the link, and an approximate location worked out from your IP address, no finer than a city.
What is never sent: your photo, your caption, the words of any wish, or the note in the “tell us about them” box. We record that something was typed and roughly how long it was — not what it said. Session recording, heat-maps and automatic click capture are all switched off, because each of those would sweep up the content of the page in front of you.
PostHog Inc. handles this on our behalf, on servers in the United States.
Turning it off: switch on Do Not Track in your browser and none of it loads at all. We also skip it entirely when your device is in data-saver mode or on a 2G connection.
AI wish suggestions
If you tap Suggest, we send the choices you made — who it is for, the tone, the language — along with the short note about the person, if you filled one in. That note goes to Google's Gemini model, which writes the wishes. Please do not put anything private in it.
Before the request goes anywhere, Cloudflare Turnstile checks that you are a person and not a script. It does not use tracking cookies and does not profile you, but it does see your IP address in order to do the check.
Our server keeps a one-way hash of your IP address so that one person cannot use up the whole day's AI budget. It cannot be turned back into your address, and what you typed is never stored. Those counters delete themselves within 48 hours.
The rest of the site works perfectly well without this. If it is switched off or fails, you get wishes from our written collection instead, and nothing is sent anywhere.
When you write to us
The form at the bottom of this page sends your message to our server, along with the topic you picked and your email address if you chose to give one. Nothing else is attached — no name, no page history.
Your email is used for one thing only: replying to you. Leave it blank and we simply have no way to reach you, which is a perfectly reasonable choice if you only want to report something.
Messages are deleted automatically after 30 days. The same Turnstile check and the same rate limits apply here, which is what keeps the form from being used to send bulk mail.
Gift links
The links on the Gifts page are affiliate links. Tapping one sends you through INRDeals to the shop, and if you buy something we may earn a commission — the price you pay is the same either way. Those companies set their own cookies and have their own privacy policies. All we ever see is a sales report with amounts on it, never who bought anything.
Hosting
The site is served by Cloudflare, which keeps ordinary server logs, including IP addresses, for security and abuse prevention.
Children
This is a general festival site and we do not knowingly collect anything from children. Since we ask nobody for personal details, there is nothing for a child to hand over.
Your rights
Under India's Digital Personal Data Protection Act you can ask what is held about you, have it corrected, or have it deleted. We hold nothing that identifies you by name. In practice that means clearing this site's data in your browser removes everything, and Do Not Track stops it being created in the first place.
Changes
This site exists for one festival. If anything here changes, the date at the top changes with it.
Write to us
Questions about any of this, or something you want corrected or deleted — send it here. No account needed.