Last updated 29 August 2026
Privacy, in plain language.
We collect less by design, and we explain the parts we do use.
Reading a letter
You do not need an account, public name or email address. Your recent letters, reactions, draft and reading preferences can be stored in your own browser so the experience works smoothly. You can clear that data through your browser at any time.
Writing and feedback
A submitted letter stores its text, optional sign-off, prompt, moderation status and timestamps. Reactions, mood choices and reports store the selected response and letter ID. We do not ask for a writer's real name or email.
Keeping the service safe
For public write actions, the service turns an IP address and browser description into a salted one-way fingerprint used for short rate-limit windows. Raw IP addresses and browser strings are not stored in the application database. Hosting providers may retain standard security logs under their own policies.
Sharing and tracking
We do not sell personal information and do not use third-party advertising trackers. Moderators can access pending letters and safety reports only to run the service. Records may be disclosed when legally required or necessary to protect someone from serious harm.
Contact
Operator contact details are being carried across from the pilot. In the meantime, do not include contact details in a letter or report.