Privacy Policy

Who's responsible

Kept Letters (keptletters.com) is a small service owned and run by a private individual, the owner of Kept Letters, who is responsible for the data described here.

Any question about your data: hello@keptletters.com.

What Kept Letters is

Kept Letters is a private “Open when…” book for two. One of you writes pages ahead of time; the other opens them when the moment comes. There are also Days, where you both write about the same evening without seeing each other's entries.

There's no feed, no public profiles and no ads. What you write is visible only to the two of you.

Email and time zone

Unless you turn it off in settings, we send short emails about what the other person did: a new page, a request, a reply in the margin, an evening. They never contain the letters themselves.

Your email address is how you sign in. There are no passwords: each time, a one-time code is sent to your inbox, and it's valid for 24 hours.

Your time zone is picked up automatically by your browser, so that opening dates and date locks follow your local calendar.

What you write

Everything you add yourselves is stored: pages, text, photos, voice recordings, notes, Days entries, replies in the margins, responses, bookmarks and page requests.

So are the book's title and dedication, and your “together since” and meeting dates, if you've set them.

Time capsules — letters you send to anyone by link. For these we store the text, the names you enter, the opening date and the day it was opened.

Service records

To make the book work, the service keeps when each page was created and first opened, a log of openings (who opened which page and when), and your sign-in session.

Separately, the hosting provider keeps technical logs: IP address, time and the requested URL.

How your data is used, and how it isn't

Only to run the service: to let you in with a code, keep what you've written, show it to the other person in your space and work out dates on your calendar.

Your data is never sold or passed to advertisers. It isn't used for advertising, and it isn't used to train AI models.

Who can see what you write

Only the two members of your space. Photos and voice recordings live in private storage and are served only after checking that the request comes from a member of that particular space.

The owner of the service has technical access to the database but doesn't read what's in it, unless the law requires it or you ask for help with a problem that needs a look.

Anyone with a time capsule's link can open it — but not before the date you set: until then the server shows the text to no one except its author. Capsule pages are hidden from search engines.

Service providers

Kept Letters relies on three companies: Vercel Inc. for hosting and file storage (files are stored in the US, region iad1), Neon for the cloud PostgreSQL database, and Resend for sending sign-in emails.

Their servers may be outside your country, including in the US and the EU. By using Kept Letters, you agree to your data being stored and processed there.

Cookies

Only the cookies the site can't work without: your sign-in session (HttpOnly, so scripts on the page can't read it), Auth.js sign-in cookies that guard against forged requests and remember where to send you after signing in, and NEXT_LOCALE, which remembers your language.

No analytics, no advertising or tracking cookies, no third-party marketing tools. That's why there's no cookie consent banner: there's nothing to ask about.

How long things are kept

What you write is kept for as long as the space exists. A sign-in session lasts up to a year; a sign-in code, 24 hours.

Technical logs are kept by the hosting provider, which sets how long they're retained.

Export and hiding a space

You can download everything you've written as a single file at any time, on the space and export page.

You can also hide a space just for yourself. That doesn't need the other person's agreement, and nothing gets deleted.

Deletion

What's written in a space belongs to both of you, so a space is deleted for good only when both of you ask for it. Its books, pages, Days and replies are then deleted.

Once the other person has opened a page, its author can't delete it. That's how the book works: what's been opened stays.

Deleting your whole account isn't self-service yet. Email hello@keptletters.com and it will be taken care of.

Your rights

You can ask what data is stored about you, get a copy, have it corrected or deleted, or withdraw your consent. The quickest way to get a copy of what you've written is the export; for everything else, email hello@keptletters.com.

You'll get a reply within a reasonable time, and no later than 30 days.

Age

You need to be at least 16 to use Kept Letters.

Changes to this policy

If this policy changes, the new version will be posted on this page with a new date at the top.