What this service is
Instacartoon creates clearly fictional delivery-prank links. It is restricted to people aged 16 or older and does not process payments or arrange real deliveries.
Information processed
- Creator-provided nicknames, prank text, fictional cart selections, broad city or neighborhood labels, and optional love-session photos or questions.
- A randomly generated recipient link and a separate creator-management capability.
- Pseudonymous HMAC identifiers derived from network addresses and user-agent strings for rate limiting, fraud prevention, and abuse investigation. These are pseudonymous—not anonymous.
- Bounded fictional cart contents stored in your browser. We do not request a birth date, street address, exact coordinates, or payment information.
Purpose and legal basis
Content is processed to provide the requested prank, maintain security, prevent abuse, respond to reports, and meet legal obligations. Configured advertising is contextual and non-personalized by default.
Sharing and processors
Hosting and operational data may be processed by Vercel, Heroku, and Supabase. Google receives the information necessary to serve contextual, non-personalized advertising. We do not sell prank content.
Retention and deletion
Prank and love-session content, including private photos, expires within 30 days and may be deleted sooner using the creator capability. Pseudonymous abuse records are retained for no more than 90 days unless a longer period is legally required.
Your rights
For access, deletion, objection, or other applicable privacy rights, contact [configure VITE_LEGAL_CONTACT_EMAIL]. Include the recipient URL but never send a creator capability by email.
Security and international processing
We use access controls, private object storage, encryption in transit, scoped database roles, request limits, and monitoring. No internet service can promise absolute security. Processing may occur outside your country subject to the safeguards offered by our providers.