This page explains what the WUPHF fan app collects, why, and what
happens to it. This app is an unofficial, fan-made project connected to
wuphf.co.uk and is not affiliated with
NBC, Universal, or the creators of The Office.
The short version: the app doesn't have accounts,
doesn't run ads, doesn't use analytics or tracking, and never sells
anything to anyone. To send a message, you must provide your own email
address and the recipient's — this is required specifically so the
sending feature can't be used anonymously, and so the recipient can
reply directly to a real person. A record of each send (including the
message itself) is kept for 30 days, then automatically deleted.
What the app collects
When you use the "Send a WUPHF" feature, the following is sent to our
server in order to deliver your message:
Your own email address — required, not optional. It's
used as the "reply to" address on the email that gets sent, so the
recipient can reply to you directly, and so the feature can't be used
to send anonymous messages.
The recipient's email address — whatever you type in,
so the message can actually be delivered.
The message text you write, and optionally your name
if you choose to include it.
A random device identifier — generated on your phone
the first time you install the app, stored only on your device, and
used to count how many messages have been sent today so the daily
limit can be enforced. It isn't linked to your name, your Google
account, or anything else identifying.
Your IP address, as a standard part of any request to
our server — used the same way, to enforce a daily sending limit and
spot abuse.
What the app does not collect
No account creation, no login, no password.
No analytics, crash reporting, or advertising identifiers.
No access to your contacts, photos, location, or other apps.
Nothing is ever sold, rented, or shared with advertisers.
How it's used, and how long it's kept
The information above is used for exactly one purpose: delivering the
message you asked to send, and preventing the sending feature from being
used to spam, harass, or threaten anyone.
A record of each send — sender email, recipient email, the message text,
a shortened device ID, and IP address — is kept for
30 days, then automatically and permanently deleted.
This exists specifically so there's something real to act on if the
sending feature is ever misused (for example, to identify who sent a
threatening or harassing message, if reported). It is not used for
marketing, analytics, or any purpose beyond handling abuse reports, and
it is not accessible to anyone besides the app's operator.
Third parties involved
Two service providers are used to actually run the sending feature:
Resend (privacy policy) — handles the actual delivery of the email you send.
Cloudflare (privacy policy) — hosts the backend that processes your request and enforces the
daily send limit.
Neither is used for advertising or any purpose beyond making the send
feature work.
Children's privacy
This app is not directed at children, and it doesn't knowingly collect
information from anyone under 13.
Changes to this policy
If anything here changes — say, if the app ever adds new features that
collect different data — this page will be updated and the "last
updated" date at the top will change accordingly.
Contact
Questions about this policy or the app can be sent to
app@wuphf.co.uk.