Privacy Policy

Accounts and letters

We handle your name, email address, authentication and session details, username, and related account data. Turso stores the images and titles of sent letters, Bottle Mail, pen-pal connections, reports, and other data needed for the service. We use them for sign-in, delivery, the inbox, correspondence, and safety work. To limit abusive sign-in attempts, we also temporarily count requests by IP address and authentication route.

Drafts in this browser

Unsent letters and notes stay in this browser's storage and do not sync to other devices automatically. You control exported JSON backups and images. To sign or verify a personal backup, the browser sends only a SHA-256 digest of its contents to the server, never the contents themselves.

Drafts are shown separately for guests and each account. Signing in does not automatically move guest drafts. Older drafts with no verifiable owner can be exported for safekeeping in Settings.

Service providers and payments

The app runs on Cloudflare and uses Turso for its database. Better Auth manages sign-in; you may choose Google or GitHub sign-in. Stripe handles new monthly payments and subscriptions and receives your account ID, email address, chosen interface language, and plan identifier. Subscriptions completed through an earlier Polar checkout are managed by Polar. We do not send letter text, images, or audio to either payment provider. Each provider handles information under its own policies.

Voice input and browser data

Voice input uses the browser's Web Speech API. Audio may be sent to the browser provider's recognition service; check the notice before starting. We use session cookies for sign-in and a cookie for display language. The hosting provider may process request information needed to deliver and protect the service.

Deletion and questions

Deleting your account in Settings removes your account and associated data in the active Turso database, including sent and received letters. Turso recovery history may retain earlier data during its retention window. You can also choose to erase this account's drafts in this browser. Other devices, exported copies, and Stripe and earlier Polar billing records remain separate. Cancel any automatically renewing Stripe or earlier Polar subscription before deletion. Contact us to ask about access, correction, or deletion of your information.