Privacy Policy

The content of the letter you write, the name you give us, your email address, your chosen delivery date and time zone, and basic technical records needed to deliver your letter (such as timestamps and delivery attempts).

Only to deliver your letter to you on the date you chose, to verify that the email address belongs to you, and to let you manage or delete your letter. We do not profile you and we do not sell data.

Letters are stored in a managed European-hosted database. Your letter content is encrypted by our servers with authenticated encryption before it is written to the database, using a key held in separate server-side secret storage — never in the database alongside your letter and never in the website you are reading now.

All traffic is encrypted with HTTPS and the database is encrypted at rest. Letter content is accessible only through your authenticated account and the protected automated process used to deliver it. There is no public read access to letter content, and it cannot be read from the browser by anyone other than you.

Verification, management and sign-in links use high-entropy tokens that are single-use or short-lived, and only a cryptographic hash of each token is stored.

Letter content never appears in logs, analytics, error reports, admin views, URLs or notifications. Operational views show only metadata such as status, dates, delivery attempts and a masked email address. We never use letter content for analytics, advertising, AI training, research or any other secondary purpose.

When you verify your email address, Kroglund creates a private, passwordless account connected to that address, or connects your letter to the account you already have. You sign in later with a short-lived link sent to the same address — there is no password to remember or to lose.

A managed database and application hosting provider, and an email delivery provider. The email provider necessarily processes your email address and the delivered letter at the moment of delivery.

• If you begin a letter but do not verify your email, your encrypted draft is kept for up to 30 days so you have time to return and complete it. We may send one reminder after 24 hours. If the email remains unverified, the draft is permanently deleted after 30 days.
• Once your email is verified, your letter is kept encrypted in your private archive until you delete it or close your account. Sealed letters stay unread until their delivery date; delivered letters remain available to you afterwards.
• You can delete an individual letter, or close your account and delete every letter, at any time from your archive. Deletion removes the information from our active systems immediately, while encrypted backup copies expire according to our hosting provider's backup-retention schedule.

Deletions of unverified drafts are carried out by a scheduled routine that runs daily, rather than at the exact minute a retention period ends.

Your archive shows every letter connected to your verified email address. From there you can read delivered letters, see and change the delivery date of a sealed letter, delete a letter permanently, or close your account entirely. Sealed letters can also be managed with the private link in your confirmation email. You can email us to request access or deletion at any time.

Letters are sent from a branded Kroglund address. We send both an HTML and a plain-text version. Your letter is never sent to an unverified email address.

We never add you to a newsletter automatically. Any marketing consent is a separate, unchecked choice, and the letter service works fully without it.

For any questions, write to words@kroglund.co.