Privacy Policy

Introduction

We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our service.

Information We Collect

We collect the following types of information to provide and improve our service:

1. Account Information — Your name, email address, and other details you provide when creating an account.
2. Usage Data — Information about how you interact with the service, including features accessed, frequency of use, and interaction patterns.
3. Device Information — Device type, operating system, and browser type, used to optimize compatibility and performance.
4. Cookies — Small data files stored on your device to remember preferences and improve your experience.
5. Payment Information — Billing details handled by trusted third-party payment processors. We do not store full card numbers on our servers.

How We Use Your Information

We use the data we collect to:

• Provide, maintain, and improve the service.
• Process transactions and send related confirmations.
• Send technical notices, security alerts, and support messages.
• Respond to your questions, feedback, and support requests.
• Detect, prevent, and address fraud and abuse.

Data Sharing

We do not sell your personal information. We may share data only in these limited cases:

• With service providers who help us operate the service, under confidentiality agreements.
• To comply with legal obligations or respond to lawful requests from public authorities.
• To protect our rights, property, or safety, or that of our users.

Letters, Photos, and Sharing

Unpublished drafts are stored in your browser. Publishing requires sign-in and stores the letter and private copies of included media on the service. Edits to a published letter are saved online. Previous versions and their private attachments are retained for the owner until the letter is deleted. Previously published guest letters can still be managed in the browser that holds their HttpOnly management cookie. Clearing that cookie removes guest management access. Signing in leaves these guest letters separate from your account.

By default, anyone with the unlisted link can open the letter, including people it is forwarded to. Optional first-device access uses a cookie to bind the first recipient browser that actively opens it. First-device access uses an HttpOnly browser cookie. Link previews and author previews leave the recipient slot open. Password and invited-email access are planned.

When you schedule an email, we store the recipient address encrypted and give the address and share link to the mail provider when sending it. You can cancel a pending email in Access settings.

Attachments shown to recipients follow the letter’s access settings. Older public attachments are hidden from recipients until the author moves them to private storage. Original public URLs may still be accessible at their source. Recipients can save files and take screenshots. Letter pages and protected media request noindex and nofollow. These instructions do not themselves provide access control. Private letter pages omit analytics, ads and chat embeds and use a no-referrer policy.

Homepage examples use fixed fictional content and demonstration artwork. Think carefully about which people might receive your link before uploading sensitive material.

Retention, Withdrawal, and Copies

In My Letters, you can change access, revoke or regenerate the link, set an expiry, reset the first recipient browser, or delete the published copy. Links have no expiry by default. Revocation and expiry block new requests through the share link, including requests for private attachments. Expiry leaves stored files in place. Hosting duration and automatic deletion times for media and backups are unspecified.

Deleting a letter removes the published letter, its version history, its private attachments and its matching Story entry. Your browser draft is kept separately. If attachment cleanup fails, access stays revoked and you can retry deletion. Recipient copies and older public media remain outside these controls.

Data Security

We implement industry-standard security measures including encryption in transit, access controls, and regular reviews. No method of transmission over the Internet is 100% secure, but we work continuously to protect your information.

Your Rights

Manage published copies at My Letters, including previously published guest copies from the browser holding their management cookie. For additional account and privacy requests, use account support, which requires sign-in.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the date at the top of this page and, where appropriate, sending a notice through the service.

Contact Us

For questions about this policy, open account support. Sign-in is required for support. Previously published guest letters can be managed from their original browser in My Letters.