Privacy Policy

Last updated: 15 September 2026

日本語で読む

1. What we collect

When you register: your email address, your password (stored hashed), your display name and its handwriting (stroke data).
When you write a letter: the stroke data of the letter (coordinates, pressure, timing), the paper and stamp you chose, the name you addressed it to, the destination (a receiving link, or the recipient’s email address), and the times of sending and of scheduled delivery.
When you buy: the item purchased, the amount, and the order number issued by our payment company (Stripe). Card details never pass through our servers; Stripe handles them.
When you report a letter: which letter, the reason you chose, and anything you wrote.
Automatically: access logs (IP address, browser type, date and time), the cookie that keeps you signed in, and aggregate page-view statistics (which pages are opened, where visitors came from, approximate region, device and browser type). Page views are counted with Cloudflare Web Analytics, which uses no cookies and does not identify individuals. We do not measure the pages where letters are read or the receiving-link pages.
How you found us: if you arrive through one of our referral addresses (for example tegami.ink/yt), a cookie remembers the name of that entry (such as “YouTube”) for 30 days, and if you register within that time it is recorded with your account. If you arrive through a receiving link, we record “from a letter”; from a search engine or an AI assistant (such as ChatGPT), “from search” or “from AI”; from one of our example pages, “from an example page”. We do not record which video, post, search term or question you came from.
Receiving-link opens: whether, and when, a letter was opened through its receiving link. We do not record who opened it.
Writing-screen statistics: for visitors who have not registered, the daily number of people who opened the writing screen, started writing, and reached the step before sending. Only counts are kept; we do not record who they are.

2. Why we use it

To deliver letters, to keep you signed in, to add purchases to your stamp collection, to send arrival notices, to prevent abuse, to answer your questions, and to improve the Service. We never analyse the contents of letters for advertising.

3. Who we share it with

Within the Service, only the destination can read a letter. We do not read letters, except to review one that has been reported, and each such review is logged. (Letters are not end-to-end encrypted, so they are technically accessible to the database administrator.) We entrust information, to the extent necessary, to: Supabase (database and authentication; servers outside Japan), Cloudflare (delivery and page-view statistics; servers in and outside Japan), Resend (email), and Stripe (payment and Merchant of Record). We give personal information to no other third party, except where disclosure is required by law.

4. How long we keep it

Letters stay with their recipients after they arrive — by the nature of a letter, we do not remove one from the hands of the person who received it. If you delete your account, letters you have already sent remain with their recipients, along with your sender name.
Account details are deleted within 30 days of your request.
Access logs are deleted within 12 months.
Reports — the fact of a report and what we did about it are kept for up to 3 years, so that repeated behaviour by the same sender can be recognised.
Purchase records are kept as accounting records for the period the law requires (7 years in Japan).

5. Your rights

To see or correct your registration details, to delete your account, or to stop us using your data, write to support@tegami.ink. We will respond within a reasonable period. We equally honour the rights granted by the law of your region — including access, correction, deletion and objection under EU and UK law.

6. Cookies

We use only the cookie that keeps you signed in, the one that remembers your chosen language, and the one that remembers which referral address or receiving link brought you here (30 days). We use no advertising or tracking cookies. Page-view statistics (Cloudflare Web Analytics) use no cookies.

7. Security

Traffic is encrypted with TLS, and the database is protected with row-level permissions. Passwords are never stored in plain text.

8. Changes

When we change this policy we will publish it on this page, and announce important changes inside the Service.

The Japanese text is the authoritative version of this policy. 日本語で読む