Effective date: October 6, 2026
About this policy
This Privacy Policy describes information handled by Keptale at keptale.net when you create, share or read a letter, sign in, or purchase a saving option. It also describes how to contact us about that information. Service and saving rules are described in our Terms of Service.
Your letters and photos
Keptale lets you create and share a Love Letter without an account. We store the names, message, optional memory and up to three photos that you choose to include. Photos are held in private storage and served after the relevant reader or manager is authorized.
Letter links are unlisted links, rather than an identity check. Anyone you share the link with can open the letter. Keep your separate Manage Link private: it allows editing and deletion. Public previews and the closed envelope do not include the message, memory or photos.
How long letters remain available
The free seven-day period starts with the recipient's first active Open. Opening a preview, viewing a demo or loading the closed envelope does not start this period. A free letter that has not been opened pauses 30 days after publication or its last free restoration.
A paused or expired letter has a 90-day recovery period, measured from its original cutoff. After this period, private content is no longer returned and is scheduled for permanent removal. Deleting a letter immediately revokes its access and schedules its photos for removal. Necessary payment records remain separate from letter content.
100 Days lasts 100 continuous days from the first Open. Forever has no scheduled content expiry, subject to the service terms and the creator's deletion choice. First Open is never reset by an edit, restoration or purchase.
Server drafts that have not been updated for seven days and temporary photo uploads that remain unreferenced for 24 hours are scheduled for cleanup. Your browser's local draft is stored separately on your device.
Accounts and payments
Free creation and reading do not require login. Creators use Google to sign in before a purchase. Better Auth manages the account session. Orders are associated with that internal account; the first confirmed purchase associates the letter with it. Waffo Pancake processes one-time payments. Keptale stores order, charge, tax, fulfillment and refund records; payment-card information is handled by the payment provider.
When you sign in, we receive account information from Google, including your name, email address and profile image when provided. We use an internal account identifier to associate orders and paid letters with you. Deleting a letter does not automatically delete your account or the financial records associated with a purchase.
Payment records and related review records are retained separately to support billing, refunds, financial obligations and dispute handling. Anonymous events support the service-use measurements described below. The 90-day letter recovery period does not define how long payment records or anonymous events are retained.
Why we use information
We use information to deliver and manage letters, authorize access to private content, maintain account sessions, confirm purchases and refunds, protect the service against abuse, and understand creation and reading activity. If you contact us, we use the information you provide to respond and investigate your request.
Where applicable data protection law requires a legal basis, these purposes may involve performing our agreement with you, meeting legal obligations, or legitimate interests in operating and securing the service. Where consent is required for optional processing, it must be obtained before that processing.
Cookies and anonymous events
Essential signed cookies maintain management access, anonymous visits, short-lived reader access and a pending saving choice. Anonymous visits are represented by random browser capabilities and Gift-specific hashes, not by an IP address used as a person identifier. Hashed network identifiers also enforce request limits.
Keptale records creation steps and authorized opening, completion, reactions and payment events to understand how the service is used. Those events exclude private letter text, names, Manage Tokens and photo or checkout URLs. Completion does not require an emoji response. Google Analytics is currently disabled. Error monitoring discards request data, user information, breadcrumbs and arbitrary error messages.
You can clear cookies and local drafts through your browser settings. Doing so may remove access saved in that browser and your unfinished draft; it does not delete a published letter or cancel a payment. Keep your Manage Link safe if you want to manage a letter later.
Providers and disclosures
Cloudflare supplies hosting, database and private image storage, and supplies bot protection when enabled. Google supplies account sign-in, Better Auth supplies session handling, Waffo Pancake supplies checkout, and Sentry may receive sanitized technical errors when configured. Providers process information needed for their functions and may have their own applicable privacy terms.
Content is disclosed to people who hold its public letter link and authorized managers as part of providing the service. Information may also need to be disclosed to comply with a legal requirement or investigate fraud, abuse or security incidents. We do not publish private letter content in closed-envelope pages or social previews.
Your choices and privacy requests
You can edit or delete a letter through its private Manage Link, or through your account if the letter is associated with that account. Deletion immediately revokes access to the letter and schedules photo removal; it cannot remove copies that other people have already kept.
For account deletion or a request concerning your personal information, email contact@keptale.net with the subject "Privacy request". Depending on the law that applies to you, you may have rights to access, correct or delete information, receive a portable copy, restrict or object to processing, withdraw consent where processing relies on it, or complain to a data protection authority. We may need to verify your authority before disclosing or changing information. Necessary financial records may be retained where required by law.
Do not send your password, payment-card details or a Manage Link in an initial email. Include only the information needed to describe the request. If a letter contains your information without permission, you may also contact us to report that concern without creating an account.
Security and international processing
Keptale uses private photo storage, access checks, limited reader permissions and controls that keep private content and credentials out of analytics and error reports. No online service can guarantee absolute security. Unlisted links can be forwarded, so share letter links carefully and keep management links private.
Hosting, sign-in and payment providers may process information in countries other than the one where you live. Privacy laws in those countries may differ from those in your country. Contact us if you have questions about how your information is processed.
Changes and contact
We may update this policy as the service changes. Updates will be published on this page with a revised effective date. For privacy questions, support or abuse reports, contact contact@keptale.net.