Privacy

Who this is about

Sundry Works Ltd, a New Zealand company, operates eyerollhq.com. Contact: the contact page.

What we actually collect today

• Nothing you type into the generator is stored or sent anywhere. Names, occasions and traits are used in your browser to produce your five lines and go no further.
• You can read every joke and its rating without an account. The star rating shown is a real average across everyone who's voted, not personalised, not tied to you.
• An account is only needed to vote on a joke or buy something. Signing in takes an email address and nothing else, no password, no name, no other profile detail. We use Supabase to run this (authentication and the database that stores votes and orders).
• Your vote is stored against your account (one vote per joke, so you can change it later). It's visible to you, never to other visitors individually, only ever shown to anyone else as part of the anonymous aggregate average.
• Cookie consent choice (accept/manage) is stored locally so we don't ask you twice.

If you request a lead magnet

Pages offering something to download (the speech skeleton, the lunchbox cards) have an email field, separate from the login email above. Submitting it stores your email and, if you ticked the box, your consent to occasional marketing email, unticked by default, and never required to get what you asked for. Nothing is emailed to you yet. The sending system (a verified subdomain, double opt-in confirmation) isn't built yet, so right now this only adds you to the list for when it is. We won't pretend otherwise in the interface either.

What we will collect once live features ship

• Payment details, once the shop's checkout is live, handled entirely by Stripe; we never see or store card details ourselves. We do keep a record that you bought a given product, tied to your account, so you can access what you paid for.
• Basic, aggregated analytics and, once running, ad personalisation, both gated behind the cookie consent banner, and both off by default for EEA/UK/Switzerland visitors until you accept.

What we never collect

Age, sex or gender. The generator doesn't ask, on principle, not just by omission. We don't build a profile of who you're writing about, either.

Your rights

Your consent choice lives in your own browser. Clearing local storage resets it immediately. For anything held in your account (your email, your votes, your order history), contact us via the contact page and we'll act on access, correction or deletion requests, including deleting the account itself.

Last updated: pending launch.