Your details stay yours.

Your address book belongs to your account. A personal update link lets anyone holding that link view and update that one contact.

Relationship labels are private to the person who keeps the book. They are not included on the recipient’s update form.

When you choose Send email, Keepsake sends the recipient’s email address, your display name, and a personal update link to Resend for delivery. Invitations are sent only when requested. The email includes a way to stop future invitation emails; this does not stop sign-in codes.

Invitation send records and short-lived encrypted retry data help prevent duplicate emails and abuse. Recipient preference records use a fingerprint of the email address. Email links expire after 30 days, and the book owner can deactivate them sooner.

Keepsake records basic activity, such as opening a page, signing in, saving a contact, or creating an update link, along with the time, general device type, operating system, browser, and error category. A temporary browser-session identifier connects steps in the same visit.

The owner-only admin panel shows account email, signup and last activity times, contact counts, and these activity events. Analytics does not include contact names or details, search text, login codes, update-link tokens, full URLs, IP addresses, or session recordings.

Activity reports cover up to 90 days. Older events are removed periodically as the app receives activity. Browser Do Not Track and Global Privacy Control signals disable this product analytics collection. Hosting and authentication providers maintain separate operational records needed to run the service.

Device information is approximate. For example, a browser may identify an iPhone or Android device without revealing the exact model.