sensy

Privacy policy

Version of 12 October 2026 · Draft pending legal review.

Who we are

Sensy (sensy.page) is operated by Weekshot Sp. z o.o., Poland («we»). We are the controller of the personal data described here. Contact: [email protected].

What we process

Messages and letters you send. The symbols, the caption or the letter text and the signature you write, the look you choose, your interface language, the time of creation and, if you use it, the «seal until» time. Also a hash of the deletion key that stays on your device. Anyone who has the link can view a message. The content is stored in our database as it is, so technically we can read it; we only look at it to handle abuse reports or when the law requires it. Please do not put secrets or sensitive data into a message.

Opens. When a message starts to play, the page tells us. We keep only numbers per message and day: how many times it was opened, and how many of those were the first open on a device. We do not store IP addresses, device details or anything else that identifies the person. To tell a first open from a repeat, your browser keeps a list of the messages it has opened.

Data kept only on your device. «Mine» (the messages you sent, with their texts and deletion keys), drafts and the list of opened messages stay in your browser’s local storage and are never sent to us. Clearing the browser’s data removes them.

Partners. For businesses that work with us we store the partner’s name, language and logo, and the e-mail addresses and roles of the people allowed into the partner workspace. They sign in with Google, and we receive their e-mail address as confirmed by Google. On partners.sensy.page we set one strictly necessary cookie that keeps a person signed in for up to 30 days.

Technical data handled by our providers. Cloudflare delivers and protects the site and processes IP addresses and request data for that purpose (this includes hiding e-mail addresses on our pages from bots). Google processes sign-in data when partner members sign in with Google.

We do not use advertising, analytics trackers or tracking cookies, and we do not sell data.

Purposes and legal bases

Providing the service you use (storing and showing messages, the partner workspace): Art. 6(1)(b) GDPR.

Security, preventing and handling abuse, and aggregate open counts that tell us whether the service works: Art. 6(1)(f) GDPR, our legitimate interests.

Meeting legal obligations: Art. 6(1)(c) GDPR.

How long we keep data

Messages: until the sender deletes them from «Mine» or we remove them. A removed message stops opening at once; its content is erased from our database 30 days after removal (the delay allows an accidental deletion to be undone).

Open counts: kept as aggregate numbers that contain no personal data.

Partner members: until they are removed from the partner’s list. The sign-in cookie expires after 30 days or when you sign out.

Who processes data for us

Cloudflare, Inc. (hosting, database, network) and Google (sign-in for partner members). Some processing may take place outside the European Economic Area; it is covered by the EU standard contractual clauses and/or the EU–US Data Privacy Framework.

Your rights

You have the right to access, rectify and erase your data, to restrict or object to its processing, and to data portability. Write to [email protected].

To delete a message you sent, open «Mine» on the device you sent it from and delete it, or send us its link at [email protected].

You may lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), Poland.

Children

Sensy is not intended for children under 16.

Changes

When this policy changes, we update this page and its version date.