Privacy, in plain words.
Dedicup is a small project run from Ottawa. Here is exactly what we keep and why.
What we store
When you dedicate a cup we keep the photo, what you saw in it, your dedication, your name and email, and the name and (if you gave it) email of the person it is for. Guesses left on a card are kept with the card, with the first name typed by the guesser.
What is public
The card can be opened by anyone who has its link. The A Million Cups of Kindness page shows each cup's photo, its number, and what the sender saw in it. Names, dedications and the card itself are never shown there; a card opens only for someone who has its link. Email addresses are never shown anywhere.
We email the receiver once, from cups@dedicup.com, to deliver the card. We may send senders an occasional note about Dedicup (the weekly Top 10, for instance); every one has an unsubscribe link and we stop when you ask. We do not sell or share addresses.
Removing a cup
Every sender gets a private removal link when they pour a cup. Anyone else who wants a cup taken down can write to hello@dedicup.com; we remove it within a day, no questions.
Where it lives
Photos and data are stored with Supabase (hosted on AWS in North America), the site runs on Vercel, and email goes through Resend. We keep the original photo so cups can be printed later if you ask for that.
Questions: hello@dedicup.com. Last updated November 2026.