Privacy

The letter you write and the files you attach.

The email addresses you give us — yours and any additional recipients — plus a name, if you provide one.

The delivery date and the timezone your browser reported, so we can deliver in the morning rather than the middle of your night.

Your IP address and browser user-agent at the moment you seal a capsule, kept only to investigate abuse. Both are erased the moment your capsule is delivered.

We do not use analytics, advertising trackers, or third-party cookies. There is no account, so there is no profile to build.

Photos and video are kept until 90 days after your capsule is delivered, then permanently deleted. This is stated when you write the letter, in your confirmation email, and again in the delivery email.

The letter text itself we keep indefinitely, so that a delivery link still shows the letter years later. Delete the capsule and it goes too.

Unconfirmed capsules and abandoned drafts, with their files, are deleted automatically after seven days.

Records of delivery attempts are kept so we can answer the question 'did it actually send?' years later.

The people you addressed the capsule to, on the delivery date.

Our infrastructure providers, which today are Supabase (database), Cloudflare R2 (files), Resend (email), and Vercel (website). They process this data on our behalf and do not have permission to use it for anything else.

Law enforcement, if we are legally compelled — and in the case of child sexual abuse material, on our own initiative.

Your files are stored privately and served only through links that expire after an hour. They are never publicly readable.

Every link we email you is backed by a random token, and we store only a one-way hash of it. Someone who obtained a copy of our database could not use it to open your capsules.

That design has a consequence worth knowing: if you lose the email containing your management link, we genuinely cannot look it up for you. There is no account to recover.

Delete any capsule at any time using the link in your confirmation email — that removes the letter and its files.

If you receive a capsule you did not want, the report link in the email blocks the sender from ever reaching you through us again.

For anything else, including a request to see or delete what we hold about you, write to hello@timecapsulemail.com.