What happens to my letters and files?
You are storing something private and asking a service to keep it until you cannot. The reasonable question is who can read it, and when.
Who can read your letters
Nobody you did not name. Letters are tied to your account, and the recipients you add are the only people who ever see them.
Some practical detail on that:
- Recipients see the letter only when it is released, meaning you missed check-in past the grace period, or a send date you chose arrived.
- They get a time-limited link, not the letter pasted into an email. The link expires after 90 days, and you can revoke it.
- Watchers are a separate list. Inviting someone to see your status does not give them your letters. If you want both, you add them twice, on purpose.
When letters are sent
Two triggers, and you choose whether either is active per letter.
| Trigger | Fires when |
|---|---|
| Missed check-in | You pass your interval, ignore the escalating reminders, and the grace period ends. |
| Send date | A date you set arrives, whether or not you have been checking in. Useful for something like a birthday message years out. |
An unarmed letter does not send. Writing it is not the same as arming it, and that distinction is deliberate. You can draft freely and decide later.
Emergency stop
If something goes out that should not have, emergency stop revokes every release link, opened or not. Anyone who opens their link after that will find it no longer works.
It cannot recall a letter someone has already read, and no service can honestly claim otherwise. This is exactly why the grace period is generous and why the reminders escalate well before anything sends.
What we keep, and what we do not
- Account data: your email, display name, and login method.
- Letters and files: stored so they can be delivered. Files are capped at 10 MB each and 50 MB per account.
- Check-in records: timestamps, so the schedule works and so you can see your own history.
- Nothing sold. There is no advertising and no data broker arrangement.
The full detail is on the privacy page. It is short and written to be read rather than skimmed.
Deleting everything
You can delete a letter, remove a recipient, empty the vault, or close the account. Deleting a letter removes it, it does not simply hide it.
If you want a copy of what you have stored, ask. There is a contact address on the privacy page, and requests for a copy or a deletion are handled by a person rather than a form.
The honest limits
Two things are worth saying plainly.
Letters are not encrypted at rest yet. They are protected by access control, meaning the application will not show them to anyone you did not name, but the stored copy is not separately encrypted. If that changes, this page will say so.
This is a small service. It is run by one person rather than a company with a legal department. That has upsides, mainly that you can get a real answer from a real person. It also means you should not treat it as an institution.
Last updated: 2026-10-19