Your letter's privacy

The short version

Your letter is personal, and we treat it that way. We use your writing only to print and mail your order. We never sell it, never use it for advertising, and never use it to train AI.

Who can access your letter

Access is limited to the small team fulfilling orders. To print and mail a physical letter, a person on our team does see the letter's text and the mailing address — we won't pretend otherwise. We access it only for fulfillment and support, never out of curiosity.

What we collect

The content of your letter, the recipient's name and mailing address, your email address, and an optional return address. Payment card details are entered on Stripe's secure checkout and are never seen or stored by us.

Writing help

Writing your letter never involves AI. If you choose “Help me find the words”, the outlines, drafts, and edit suggestions you see are put together entirely on your own device, using plain rules — reusing your own wording, fixing obvious typos and spacing, and organizing your answers into a shape to write into.

Nothing you write in that flow is sent to our servers or to any outside company. It stays in your browser the whole time, and it only leaves your device once you continue into the normal letter editor and, eventually, check out.

Anything suggested is a starting point, not a finished letter. You review and approve every word before anything is printed.

Analytics & logs

We run our own analytics on our own database, plus Vercel's privacy-friendly Web Analytics. Both measure anonymous steps — “a letter was started”, “checkout started” — never your letter content, guided-writing answers, recipient, return address, or email.

We do not store IP addresses. To count visitors we use a one-way hash that mixes your address with a secret that changes every day, so it can't be reversed and can't follow you from one day to the next. We use no advertising cookies and no cross-site trackers. A short random ID is kept in your browser tab for the length of one visit, and the campaign link you arrived on (if any) is remembered so we know which posts bring people here.

If your browser sends a Do Not Track or Global Privacy Control signal, we don't record anything at all.

How long we keep it

We delete the content of your letter within 90 days of mailing. We keep basic order records (like date and amount) longer to meet accounting and legal requirements. You can also ask us to delete your information sooner where we're not required to keep it.

Payments & sharing

Payments are processed by Stripe; we don't store your card number. We don't sell or rent your information. We share it only with the services needed to operate — our payment processor and the postal service used to deliver your letter.

Contact

Privacy questions or deletion requests: admin@penned-letters.com.