Terms of Service & Privacy Policy

1. Zero Account & Privacy-First Philosophy

Slam Book operates under a zero-friction, privacy-by-design architecture. We do not require user accounts, email registration, passwords, or personal profiles to create or contribute to a Slam Book.

2. Information We Collect

We only collect the data necessary to provide and render digital memory books:

• Page Details: Recipient Name, Celebration Category, Event Date, and optional Department/Team or Job Title.
• Contributor Submissions: Contributor Name, message text, relationship tag, background styling preferences, and uploaded memory photos.
• System Logs: Standard web analytics (page view counts) strictly used for aggregated display on page dashboards.

3. Token-Based Access Security

Every created Slam Book generates 3 cryptographically isolated access tokens:

• Public Token (`/p/[token]`): Allows teammates and friends to submit memories.
• Recipient Token (`/r/[token]`): Provides a clean, read-only gift view for the recipient.
• Management Token (`/m/[token]`): Private creator URL for editing details, moderating submissions, or toggling page status.

4. Data Control & Deletion

As a page creator, you maintain full authority over your Slam Book. Via your private Management URL (`/m/[token]`), you can delete individual submitted messages, approve or hide pending entries, edit page information, or permanently archive the Slam Book at any time.

5. Third-Party Infrastructure

Slam Book relies on enterprise-grade cloud database infrastructure (Supabase with SSL encryption in transit and Row-Level Security) and Next.js hosting. We do not sell, rent, or trade user-submitted data to advertisers or third parties.