Privacy
Last updated: October 12, 2026
HeatedOne is a WebHatch Designs project in Hutchinson, Kansas. There are no accounts, no cookies, no ads and no trackers. Here is everything we keep, and why.
What we keep when you make a card
The names you type, your message and P.S., which card and color you chose, and when you made it. That is what the card shows, so we have to keep it to show it.
If something you type holds a word that is a slur in some uses and ordinary in others, or a phrase that sounds like a threat but is usually meant kindly ("you're the bomb"), the card is quietly marked, so that the person who runs HeatedOne reads it first. Nothing else changes.
Making a card needs no email address, no phone number and no account.
Who can see a card
Anyone with its link. A card's link is long and random, so it cannot be guessed, but anyone you forward it to can open it. Cards are never listed anywhere and never shown to search engines.
We read a card when someone reports it. A marked card may also be read by the person who runs HeatedOne, on a private page only they can open, so that one that breaks our rules comes down sooner.
Your address on the internet
To stop anyone making cards by the thousand, we count the cards made, and the deletes tried, from each address, network and network provider, by the hour and the day. Each count is scrambled with a secret key, so the address itself is never written down, and it is deleted soon after its hour or day is over. We never store the address itself.
HeatedOne runs on Cloudflare, which delivers the site and, like any host, sees your IP address when you visit.
Sending a card by email
Sending by email is switched off until it has been reviewed. When it is on and you choose it, we ask for your email address and the address of the person the card is for.
We email you a code first, to check the address is yours. Their email holds only the card's link and the words HeatedOne always uses: nothing you typed, not even your name.
Both addresses are kept only until the card's email goes, or for a day if it is never confirmed (two days at most if you ask for a new code). After that we keep only scrambled forms of them, made with a secret key, for 30 days, so that the daily limits on each address work. Then those are deleted too.
Every email has a link that stops HeatedOne's email to that address for good. To keep that promise, we keep a scrambled form of a stopped address for as long as HeatedOne runs.
Who else handles your information
Cloudflare runs HeatedOne: it delivers the pages and stores the cards and the counts. Resend delivers HeatedOne's email, so it sees the two addresses and the email's words. Each handles them only to do that work for us, as our service provider, and we share or sell them to no one else.
Counts
We count how many cards are made, opened, emailed, deleted and taken down each day, and which designs are used. These are totals: nothing in them identifies anyone.
How long we keep a card
60 days after the day it was last opened, or after it was made if it never was, and never more than a year after it was made. Then it stops opening, and it is deleted soon after. A card reported to us may be kept, unopened, for up to a year when the law requires it. You can delete it sooner yourself.
Deleting a card
When you make a card, you get a second link that deletes it. Open it and press Delete this card: the card and everything you typed are gone, and its link stops working.
If you have lost that link, email us the card's link from the address you would like an answer at, and we will delete it.
Tracking
We do not track you across sites, use cookies, or share or sell anything you type. There is no tracking to opt out of, so Do Not Track and Global Privacy Control signals have nothing to stop here.
One thing is kept in your own browser: whether you switched on Show scorching in the catalog, for that visit only (its session storage, never a cookie). It is never sent to us.
Children
We do not knowingly collect personal information from children under 13. If you believe a child has used HeatedOne, email hello@webhatchdesigns.com and we will delete the data.
Changes and questions
If this page changes, its date changes, and anything that matters is said at the top. Questions go to hello@webhatchdesigns.com.