sensy

Privacy policy

Version of 13 October 2026 · Draft pending legal review.

Who we are

Sensy (sensy.page) is operated by Weekshot Sp. z o.o., Poland («we»). We are the controller of the personal data described here. Contact: contact@weekshot.com.

What we process

Messages and letters you send by link. The symbols, the caption or the text and signature of a letter — including words you write yourself — the look you choose, your interface language, the time of creation and, if you use it, the «seal until» time. Also a hash of the deletion key that stays on your device. Anyone who has the link can view a message. The content is stored in our database as written, so technically we can read it; we look at it to handle reports, to moderate the service or when the law requires it. Please do not put secrets or sensitive data into a message.

Files you save. A video or a picture you save is made on your device and is not sent to us.

Opens. When a message starts to play, the page tells us. We keep only numbers per message and day: how many times it was opened, and how many of those were the first open on a device. We do not store IP addresses, device details or anything else that identifies the person. To tell a first open from a repeat, your browser keeps a list of the messages it has opened.

Data kept only on your device. Drafts, the list of opened messages and the messages you sent, with their texts and deletion keys, stay in your browser’s local storage and are never sent to us. Clearing the browser’s data removes them.

Reports. If you report a message, we store which message, the reason, your comment and, if you give them, your name and e-mail address, with the time. We do not store your IP address or device details with a report. Your browser remembers that it reported the message, so the form is not shown twice.

Partners. For businesses that work with us we store the partner’s name, language and logo, and the e-mail addresses, names and roles of the people allowed into the partner workspace. A person gives their name at the first sign-in (Google may suggest it); colleagues see it next to what that person does in the workspace. The workspace keeps a history of actions (what was created, archived, renamed or removed, by whom and when) while the partner’s account exists; the names of people who left stay in it. They sign in with Google, and we receive their e-mail address as confirmed by Google. On partners.sensy.page we set one strictly necessary cookie that keeps a person signed in for up to 30 days.

Technical data handled by our providers. Cloudflare delivers and protects the site and processes IP addresses and request data for that purpose (this includes hiding e-mail addresses on our pages from bots). Google processes sign-in data when partner members sign in with Google.

We do not use advertising, analytics trackers or tracking cookies, and we do not sell data.

Purposes and legal bases

Providing the service you use (storing and showing messages, the partner workspace): Art. 6(1)(b) GDPR.

Security, preventing and handling abuse, and aggregate open counts that tell us whether the service works: Art. 6(1)(f) GDPR, our legitimate interests.

Meeting legal obligations, including handling notices of illegal content under the EU Digital Services Act: Art. 6(1)(c) GDPR.

How long we keep data

Messages: until we remove them or the sender asks us to delete them. We do not guarantee to keep a message for any period (see the terms of service). A removed message stops opening at once; its content is erased from our database 30 days after removal (the delay allows an accidental deletion to be undone).

Open counts: kept as aggregate numbers that contain no personal data.

Reports: until we decide on them, then for 6 more months; then they are deleted.

Partner members: until they are removed from the partner’s list. The sign-in cookie expires after 30 days or when you sign out.

Who processes data for us

Cloudflare, Inc. (hosting, database, network) and Google (sign-in for partner members). Some processing may take place outside the European Economic Area; it is covered by the EU standard contractual clauses and/or the EU–US Data Privacy Framework.

Your rights

You have the right to access, rectify and erase your data, to restrict or object to its processing, and to data portability. Write to contact@weekshot.com.

To have a message you sent deleted, send us its link at contact@weekshot.com.

You may lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), Poland.

Children

Sensy is not intended for children under 16.

Changes

When this policy changes, we update this page and its version date.