Privacy

HeartMail stores what you write and the photographs you upload, because it has to in order to show them to the person you made the letter for. There are no accounts, no advertising, and nothing is sold or shared with third parties for marketing. We ask for an email address only if you pay for something, and only so you get a receipt.

• The contents of the letter: the recipient’s name, any nickname and date you enter, your messages and captions, and your chosen theme, music and decorations.
• The photographs you upload, at two sizes. They are resized in your browser before being sent.
• The address you chose for the letter, and a count of how many times it has been opened.

There are no accounts, so we don’t ask for your name or the recipient’s contact details, and we never see your card details. We don’t use advertising trackers, and we don’t sell or share anything with third parties for marketing.

The list of letters you’ve made is kept in your own browser, not on our servers — along with the key that lets you edit them. Clearing your browser data loses that list; the letters themselves keep working at their own addresses.

Payments are handled by Paystack. When you pay, Paystack asks for an email address so it can send you a receipt — that is the only time we ask for one, and it is used for the payment and its receipt, not for marketing. We don’t email you otherwise.

Your card details go to Paystack directly and never reach our servers. We keep the payment reference so we can confirm what was paid for, and Paystack handles that data under its own privacy policy.

If you ask HeartMail to suggest wording, the details you’ve entered for that letter — the recipient’s name or nickname, the occasion, and whatever you typed into the prompt box — are sent to OpenAI to generate the suggestion. Nothing else is sent: not your photographs, and not letters you didn’t ask for help with.

If you’d rather nothing left our servers at all, simply don’t use the writing help — every field can be written by hand.

We use Vercel Analytics to see roughly how many people visit and which pages they land on. It doesn’t use cookies, doesn’t build a profile of you, and doesn’t follow you to other sites. We use it to know whether the thing works, not to know who you are.

The contents of a letter are never sent to it.

Anyone with the link. Letters aren’t listed anywhere, aren’t indexed by search engines, and their addresses are hard to guess — but they are not password-protected, so treat the link as the key.

This is deliberate: the letter has to open instantly when the code is scanned, and a password would break that.

Please only upload photographs you have the right to use, of people who would be comfortable with you sharing them this way. Photographs of identifiable people are sensitive, and you are responsible for having their permission.

Letters and photographs are stored with Supabase, our database and file-storage provider. Data may be processed outside your country.

Indefinitely, until you ask us to delete it. Letters don’t expire, and we don’t delete them to save space — an anniversary letter should still open on the tenth anniversary.

If that ever has to change, we’ll say so here well in advance and give you a way to keep what you made.

Ask, and we’ll remove it along with its photographs. There isn’t a self-service delete button yet, so for now it goes through us — send the letter’s link and we’ll take care of it.

HeartMail isn’t intended for people under 13, and we don’t knowingly collect their information.

Questions, corrections, or a deletion request: get in touch and we’ll deal with it.