Privacy

HeartMail stores what you write and the photographs you upload, because it has to in order to show them to the person you made the letter for. There are no accounts, no advertising, and nothing is sold or shared with third parties for marketing.

• The contents of the letter: the recipient’s name, any nickname and date you enter, your messages and captions, and your chosen theme, music and decorations.
• The photographs you upload, at two sizes. They are resized in your browser before being sent.
• The address you chose for the letter, and a count of how many times it has been opened.

We don’t ask for your email address, your name, or the recipient’s contact details. We don’t use advertising trackers or third-party analytics that follow you across other sites. We don’t know who you are.

The list of letters you’ve made is kept in your own browser, not on our servers.

Anyone with the link. Letters aren’t listed anywhere, aren’t indexed by search engines, and their addresses are hard to guess — but they are not password-protected, so treat the link as the key.

This is deliberate: the letter has to open instantly when the code is scanned, and a password would break that.

Please only upload photographs you have the right to use, of people who would be comfortable with you sharing them this way. Photographs of identifiable people are sensitive, and you are responsible for having their permission.

Letters and photographs are stored with Supabase, our database and file-storage provider. Data may be processed outside your country.

Indefinitely, until you ask us to delete it. Letters don’t expire, and we don’t delete them to save space — an anniversary letter should still open on the tenth anniversary.

If that ever has to change, we’ll say so here well in advance and give you a way to keep what you made.

Ask, and we’ll remove it along with its photographs. A self-service delete is planned.

HeartMail isn’t intended for people under 13, and we don’t knowingly collect their information.

Questions, corrections, or a deletion request: get in touch and we’ll deal with it.