Privacy Policy

About this policy

This policy explains how Letter4U handles information when you use letter4u.org. For privacy questions or requests, contact support@letter4u.org.

Information you provide

• Account information: the name, email address and authentication details needed to create and manage your account. Passwords are handled by the authentication system; do not send your password to support.
• Letter content: names, messages, photos, uploaded audio, template choices, music links and other information you choose to save or publish. Photos are resized and compressed for the page.
• Access settings: the optional PIN protection and related verification data used to control access to a published page.
• Support messages: the information you include when you contact us, including a page link when needed to investigate a problem.

Please avoid putting sensitive personal information into a letter and only upload content you have permission to share. A letter may contain information about its recipient or other people; consider their privacy too.

How the information is used

We use this information to sign you in, save and display your pages, check ownership and PIN access, provide support, maintain the service and address abuse or security problems. We do not sell personal information or use your letters for advertising.

Letter4U runs on Cloudflare Workers and uses a Cloudflare D1 database for account and saved page information, including page content and media references. New uploaded letter photos and audio are stored in a private Cloudflare R2 bucket; older letters may still store inline media in D1. Cloudflare processes network information needed to deliver and protect the service, such as IP addresses and request details. Operational logs may be used to investigate errors and abuse. Service providers may process information in countries other than the one where you live.

Optional AI writing assistance

When you request Write, Polish or Adjust tone, the names, letter text and writing details submitted for that request are sent to Kie and the underlying AI model provider to generate a suggestion. Photos, uploaded audio and the letter PIN are not included in these requests. We record the operation and model in your account activity, without recording the prompt or suggested text in that activity log. Suggestions are only added to your letter when you choose to use them; your normal draft and saved-page storage then applies. Provider processing is subject to their own practices. You can write and publish letters without using AI assistance.

Sharing a letter and using a PIN

Personal letters are not included in the public template board. Anyone with an unprotected page link can open it. A recipient can forward a link, copy content or take screenshots.

An optional PIN is checked by the server before protected content is returned. PIN protection is an access check, not end-to-end encryption. It does not make a letter inaccessible to the service operator or to a person who obtains both the link and the PIN. Share the PIN separately and do not treat a short PIN as protection for highly sensitive information.

Cookies and browser storage

The site uses essential cookies and similar storage for authentication, language or display preferences, and the operation of the service. An unfinished draft may be stored in your browser so you can return to it on the same device. Clearing browser storage can remove that draft.

When configured, Google Analytics measures visits and steps such as starting a letter, previewing, opening checkout and completing a purchase or publication. We send catalog template/product choices and payment amounts with an opaque transaction reference, not letter text, names, photographs, audio, PINs or custom share links in these events. Signed-in creation and purchase-intent activity is also recorded in your account timeline. Orders and published pages are the authoritative payment/publication records. Browser analytics may be blocked or unavailable and is not proof of payment. When the optional consent banner is enabled, these product events wait for acceptance; rejecting consent stops them. Google Analytics is subject to Google's Privacy Policy.

Optional music

An author may upload an audio clip or add a YouTube link. Uploaded audio is stored as page content and is played only when the viewer chooses to play it.

The YouTube player is loaded only after the viewer chooses to load or play the music. At that point, the viewer's browser connects to YouTube, which may process information under its own policies. You can read the letter without loading the player. See Google's Privacy Policy for information about that provider.

Storage, deletion and your choices

You can edit or delete your published pages from My pages while signed in. Deleting a page removes it from public access; associated records may remain until administrative cleanup. Technical backups, logs or records needed for security and applicable obligations may persist beyond public removal. We do not promise a fixed deletion deadline or permanent archival storage.

Keep your own copies of important words and original photos. Deleting a published page does not remove copies or screenshots saved by other people, or a draft stored separately in your browser.

To request account deletion, access to your information, correction, or another privacy action, email support@letter4u.org from the address associated with your account. We may need reasonable information to verify ownership. Rights and exceptions depend on the rules that apply to you.

Disclosure and service changes

We may share information with providers needed to operate the service, when required by applicable law, or when reasonably necessary to address abuse, protect rights or respond to a security issue. No internet service can guarantee complete security.

If these practices change, we will update this policy and its date. Material changes may also be communicated through the service where appropriate. Google provides optional sign-in. When purchases are enabled, Stripe processes payment details on its hosted checkout. We keep the order, payment references and publishing credit ledger; we do not receive your full card number.