Privacy Policy
Last updated: March 2026
This privacy policy explains how The Day You Arrived (“we”, “us”, “our”) collects, uses, and protects your personal data when you use our website at thedayyouarrived.com.
We are operated by Execfactor Unipessoal Lda, a company registered in Portugal (NIF: PT513558772), with registered address at Praça Rainha Santa n.º 1, 1600-687 Lisboa. For any questions about this policy, contact us at hello@thedayyouarrived.com.
What Data We Collect
When you create a page on our site, we collect the following information:
- Recipient details: name, date, and city
- Optional personal context: any additional details you provide to personalise the narrative
- Payment information: processed entirely by Stripe — we do not store your card details
- Technical data: IP address, browser type, and device information collected automatically through server logs
Why We Collect It
We use your data for the following purposes:
- To generate your page: Recipient details and personal context are used to create your personalised narrative.
- To process your payment: Payment data is handled by Stripe to complete your purchase.
- To deliver your page: We store your generated page content so it remains accessible at its unique URL.
- To understand site performance: We use Vercel Analytics to monitor page load times and general usage patterns. Vercel Analytics does not use cookies and does not collect personally identifiable information.
Legal Basis for Processing (GDPR)
We process your personal data on the following legal bases:
- Contract performance: Processing your recipient details and generating your page is necessary to deliver the service you purchased.
- Legitimate interest: Technical data and analytics are processed to maintain and improve our service.
Third-Party Processors
We share your data with the following third-party services, solely for the purposes described above:
| Service | Purpose | Data shared |
|---|---|---|
| Anthropic | AI narrative generation | Recipient name, date, city, personal context |
| Stripe | Payment processing | Payment and billing information |
| Vercel | Hosting and analytics | Technical data (no PII) |
Anthropic processes your data solely to generate your page content. Data sent to Anthropic via their API is not used to train their models and is not retained beyond the duration of the request.
Data Retention
- Generated page content (narrative text, snapshot facts, recipient name, and date) is stored indefinitely so your page remains accessible at its URL. You may request deletion at any time.
- Payment records are retained by Stripe according to their retention policy and as required by Portuguese tax law.
- Server logs containing technical data are retained for up to 30 days.
Cookies
Our site uses only strictly necessary cookies required for the payment process and site functionality. We do not use advertising cookies, tracking cookies, or third-party cookies that require consent.
Vercel Analytics, which we use for site performance monitoring, operates without cookies.
Your Rights Under GDPR
As a data subject in the European Union, you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate personal data
- Erase your personal data (“right to be forgotten”), including your generated page
- Restrict processing of your personal data
- Data portability — receive your data in a structured, machine-readable format
- Object to processing based on legitimate interest
To exercise any of these rights, contact us at hello@thedayyouarrived.com. We will respond within 30 days.
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados — CNPD) at cnpd.pt.
International Data Transfers
Your data may be processed outside the European Economic Area by our third-party processors (Anthropic and Stripe are US-based companies). These transfers are protected by appropriate safeguards, including Standard Contractual Clauses approved by the European Commission.
Children
Our service is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If you become aware that a child has provided us with personal data, contact us at hello@thedayyouarrived.com and we will delete it.
Changes to This Policy
We may update this policy from time to time. The “last updated” date at the top of this page reflects the most recent revision. Continued use of our service after changes constitutes acceptance of the updated policy.
Contact: hello@thedayyouarrived.com