Privacy Policy

Preview status

This notice describes the current Digital Love Letter preview at digitalloveletter.online. For privacy questions or requests, contact support@digitalloveletter.online. The production operator identity remains to be configured; this notice does not claim that production privacy requirements or all request-handling arrangements are complete.

Keepsake content and local drafts

The five tools work without an account. Your entries may include names, nicknames, dates, personal messages, envelope messages, photos and a music link. The editor saves its draft, saved-letter identifier and private editing capability in this browser's local storage. Other people with access to the same browser profile may be able to access them. Clearing site data removes those local copies; it does not delete a keepsake already saved on the server.

When you create or update a share link, the application sends the keepsake, including its photos, to server-side storage. This development preview uses local Cloudflare D1/R2 emulation for application storage; optional AI requests and third-party music players can still contact external services. A production deployment must disclose its actual hosting and retention arrangements.

Recipient links and passwords

Anyone who has an unprotected recipient link can read that keepsake. A recipient may forward the link or copy its contents. Optional password protection makes the server check the password before returning content; the server stores a salted password hash rather than the original password. This is access control, not end-to-end encryption: the service can process the stored content.

The separate private edit link authorizes updates. Keep it private. Password protection and possession of an edit link do not guarantee permanent storage or prevent a permitted reader from making copies.

Optional AI writing

Choosing AI writing sends the recipient name, nickname, sender, relationship, occasion and the four main text sections to OpenRouter and its routed model provider. The current writing request does not send photos, music links or individual Open When envelope messages to the AI provider. Writing by hand does not require an AI request.

The current writing model and automated text-safety classifier are Qwen3-30B-A3B-Instruct-2507 from the Qwen team, accessed through OpenRouter. Before generating, we send the same writing context for a separate safety classification. After generating, the four returned text sections are sent for another classification before being displayed. OpenRouter can route requests to different inference providers; no particular inference host or provider retention rule is guaranteed by this preview. Only an explicit passing result proceeds; if a check fails or cannot be completed, the existing draft is preserved.

Safety operational logs record the input/output stage, verdict and category. The safety logger does not include the submitted names, prompt text or generated writing. This does not promise that hosting or AI providers have no other logs. Uploaded photos, music and manual edits do not pass through this AI-writing filter. See Terms and content policy for the limits and currently unavailable report channel.

Review the OpenRouter privacy policy and the applicable model provider's practices before submitting personal material. Provider retention and training practices vary; this preview does not promise zero retention or that every routed provider excludes training. You can omit sensitive details and review the returned text before sharing.

Accounts, service requests and external content

Account functionality remains available separately from the anonymous tools. If you choose to sign in, the authentication service processes account and session information; Google sign-in also involves Google. Account login is not required to create or read a keepsake. Creating an account does not automatically subscribe you to a newsletter.

The service receives network request information. Its abuse-limiting table records hashed IP/action/hour identifiers and request counts to enforce hourly limits. This is not a promise that hosting systems keep no other operational logs.

A music player or external music link can connect your browser to the selected service. That service may receive network information and use its own storage. See the Cookie Policy for browser storage and integration details.

Retention and available choices

There is no promised lifetime hosting or fixed automatic deletion period for saved keepsakes in this preview. Keep your own copies of writing and photos. Birthday cards can be downloaded as PNG files. The current editor supports updating a saved keepsake through its edit link; it does not provide a keepsake deletion or data-request portal. Deleting an account must not be assumed to delete anonymously saved keepsakes.

Email privacy questions or requests to support@digitalloveletter.online with enough information to identify the relevant account or keepsake. Never send passwords, private edit credentials or full payment-card details. This email channel is separate from the editor and does not automatically delete stored content. Retention and request-handling arrangements will be updated here when confirmed.