Privacy Policy
Your privacy is our top priority. We protect your most precious memories with enterprise-grade security.
Last updated 4 November 2026
Enterprise Security
Letters encrypted before they are stored
No Data Selling
We never sell or share your personal data
Complete Control
You own and control your content
01 Introduction
At LetterForLater, we understand that your letters contain your most precious memories and messages for loved ones. We are committed to protecting your privacy with enterprise-grade security and transparent practices.
This Privacy Policy explains how we collect, use, protect, and share your information when you use our digital legacy letter service.
02 Information We Collect
Account Information
- Name, email address, and account settings
- Two-factor authentication data (if enabled)
- Password, stored only as a one-way hash, never in plain text
- If you sign in with Google: the name, email address, Google account ID and profile picture Google shares with us
- Email verification: we send a 6-digit code and a one-click link. Both expire after 2 hours, and only the most recent one works.
Your Content
- Letters and messages you create, including drafts
- A letter you write on our homepage before signing up: kept in your browser's local storage and our session until your account is created, then saved to your account. If you never sign up, it stays only in your browser until you clear this site's data.
- Photos, videos, and audio attachments
- Delivery schedules and recipient information
- Trusted contact details for verification
Technical Data
- Device information and IP address for security
- Usage logs for service improvement and security
- Website analytics data for service improvement
- Newsletter subscription data
03 How We Use Your Information
Service Delivery
- check Store and protect your letters
- check Deliver messages at scheduled times
- check Manage trusted contact verification
- check Provide customer support
Security & Safety
- check Prevent fraud and unauthorized access
- check Monitor for security threats
- check Maintain service reliability
- check Comply with legal requirements
Important We never access the content of your letters unless required for technical support you've requested. Your messages remain private and encrypted.
04 Information Sharing
We Never Sell Your Data
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
Limited Sharing
We only share your information in these specific circumstances:
- Trusted Contacts: Only when you've designated them to receive verification requests
- Service Providers: Secure cloud storage and email delivery services under strict contracts
- Payments: Stripe processes card payments. We never see or store your card number.
- Analytics Providers: Google Analytics, Google Tag Manager and Microsoft Clarity - only if you accept cookies (see Cookies & Tracking).
- Legal Requirements: When required by law or to protect our rights and safety
- Your Consent: When you explicitly authorize sharing
05 Data Security
Encryption
Every connection uses HTTPS. Letter titles and contents are encrypted (Fernet, AES-128) before they are stored, with a key held by the service - this is encryption at rest, not end-to-end encryption. How it works.
Access Controls
Strict access controls ensure only authorized personnel can access systems.
Regular Backups
Automatic backups protect your data with multiple redundant systems.
Delivery Monitoring
A scheduled letter that fails to send is retried automatically, and failures alert us, so a letter is never silently lost.
06 Your Sovereignty & Rights
Archive Protocol (Data Export)
We believe in true data sovereignty. You have the right to request a complete, encrypted archive of all your letters, media, and metadata. This protocol ensures your voice is never locked into a single platform.
Deactivation Protocol
Instead of simple deletion, we offer a suspension option. Deactivation pauses your account but preserves your digital estate in a secure 'stasis' mode, protecting your letters from accidental loss during transitions.
Permanent Erasure
You have the 'Right to be Forgotten.' Upon a verified request, we will permanently purge all your data, including encrypted letters and keys, from our active servers within 30 days.
To exercise your rights: You may initiate these protocols directly from your Account Settings or by contacting our Data Protection Officer at support@letterforlater.com.
07 Data Retention & Cookies
We retain your data for as long as your account is active and as needed to provide our service. Active accounts retain data indefinitely. Delivered letters are kept for 7 years for delivery confirmation. Upon account deletion, all data is completely removed within 30 days.
Cookies & Tracking
Essential. One session cookie keeps you signed in, protects forms against forgery (CSRF) and remembers your cookie choice. We also use this session to measure, on our own servers, how people move through the site: pages viewed, time on page and scroll depth, buttons clicked, the website or campaign that referred you, a coarse device type and browser, an approximate country where available, which sign-up form fields were left empty or rejected, and whether we suggested a fix for a mistyped email domain - never what you typed. We do not store your IP address with these records and do not share them with anyone. Once you sign up they are linked to your account; if you delete your account they are unlinked from it and remain only as anonymous statistics.
With your consent. Google Analytics and Google Tag Manager help us understand website usage. Microsoft Clarity records how pages are used - clicks, scrolling and mouse movement - including on the sign-up and email-verification pages, with form fields masked. Clarity is never loaded on the log-in, two-factor or password-reset pages. If you decline in the cookie banner, none of these load. To change your choice later, clear this site's data in your browser and the banner will ask again.
08 Contact Us
Questions about this Privacy Policy or how we handle your data? We're here to help and typically respond within 48 hours.
Questions About Your Privacy?
We're committed to transparency and protecting your most important messages.
mail Contact Privacy Team