PRIVACY
Private by link. Quiet by design.
LoveTape has no accounts. Every tape, note, and shared space lives behind an unguessable link, and the app stores only what it needs to play it back to the person it was made for.
What we store
- Mixtapes: the names you type, the title, the note, the track list with its links and artwork, your cover image if you upload one, love coupons, and an open counter.
- Bedtime notes: the two names, the date, the four reflections, and one song. Notes are hard-deleted 30 days after they are made.
- Shared spaces: both names, decisions and their messages and options, appreciations, weekly answers, important dates, and an activity log used for streaks and badges.
- Replies and reactions left by a recipient on a tape.
Private links are stored only as SHA-256 hashes, so a copy of the database cannot reveal a single tape link. Edit keys and shared-space keys are stored the same way.
Email is optional everywhere. If you leave an address to hear when your tape is opened or answered, it is encrypted at rest and used only for those messages. Bedtime routines encrypt addresses the same way and keep a one-way fingerprint to prevent duplicate sends. Email is delivered by AgentMail with open tracking disabled.
Music and artwork
Songs play inside YouTube or Spotify embeds on their own terms. When LoveTape matches a song to a video it sends only the song title and artist to YouTube, and when needed to a public Piped or Invidious index. Album artwork comes from the iTunes Search and Deezer catalogs. Recipient names and personal notes are never sent to any music service or AI model.
Rate limits and abuse protection
Anonymous features are protected by counters keyed on a keyed hash of your connection address. Raw IP addresses are not stored.
Payments
Plus upgrades and tips are handled by Stripe Checkout. LoveTape never sees or stores card details; it keeps the Stripe session id, the product, and the amount so an upgrade can be applied exactly once.
Hosting
LoveTape runs on Cloudflare Workers, D1, and R2. Cloudflare processes requests as a network provider under its own privacy terms.
Deleting things
Anyone holding a tape’s edit key can unpublish it from the confirmation page, which deletes the tape, its tracks, coupons, replies, and uploaded images. Bedtime notes can be unpublished the same way and expire on their own. Shared-space data is deleted when both people ask; write to the address on the terms page.
Last updated September 2026.