HANDMADE · 20 OCTOBER 2026
Your hands.
Your device.
Pumpkin and Snow run in your browser. Your camera and microphone stay on your device. Pumpkin gift links are optional and last 10 days.
Camera & microphone
Hand tracking and clap detection happen on your device. We do not upload or record the camera feed, audio or hand landmarks. You can stop access using the camera button or your browser permissions.
Your creations
Unfinished work exists only in the open page. Reloading or closing it starts over. Snow is not uploaded or shared. In Pumpkin, selecting Create gift link uploads only the finished carving and its model parameters to Cloudflare KV, together with a random link identifier and creation and expiration times. It does not upload camera images, audio or hand tracking landmarks. We use this data to provide the gift sharing you request. Anyone with the link can view and download that gift, so share it only with people you choose.
10 day gift links
A gift link expires 10 days after creation. Viewing or sending the same link does not extend its life. Cloudflare KV automatically expires the stored gift at that deadline, and our server refuses expired gifts. Cloudflare explains this expiration mechanism. Files you or recipients save, and copies sent through email or other apps, can remain with those people and services after the link expires.
Email delivery
In Pumpkin, if the Send email form is available and you submit it, Cloudflare processes the recipient address, 3D model and preview to pass your requested message to Resend. We do not add recipients to a marketing list or save the raw email address in our gift store. To prevent abuse, keyed recipient digests and a delivery status may remain until the gift expires; temporary network and recipient rate limit digests expire after one hour. Cloudflare Turnstile checks technical browser and request data before sending.
The 10 day gift deadline does not delete email copies. Resend states that email and log data are retained for 30 days on its standard plans, with backups persisting for 7 days. Its Data Processing Addendum describes processing and international transfer safeguards. You and recipients may keep attachments in your mail accounts for longer. The alternative Use your mail app option opens a local compose draft; you attach the saved file yourself.
Browser storage & analytics
We do not save drafts or use advertising cookies or an analytics tracker. Your browser may still cache site files and remember permission choices.
Hosting & your rights
Technical data
Cloudflare hosts the sites and processes connection data such as IP addresses and request information to deliver and protect them. Its infrastructure can process data internationally. Cloudflare describes its retention and transfer safeguards in its privacy policy and Data Processing Addendum. We do not use connection data to build visitor profiles.
Contact & rights
Olga Sukhova, Denmark, is responsible for these sites. Contact suhova.olga@gmail.com about privacy, access, correction, deletion, restriction, portability or objections where applicable. For a gift request, include its link so we can locate it. We may ask for information needed to verify your request. If you email us, we use your address and message to respond and handle your request. We keep correspondence only as long as needed to resolve your request, meet legal obligations or handle a related dispute.
Our legitimate interests are operating and securing the sites, providing requested temporary gift links and email delivery, preventing abuse and responding to requests. Access to your camera and microphone is optional. You can complain to the Danish supervisory authority, Datatilsynet.