Privacy Policy

1. What we keep

Google sign-in gives us an account ID, and usually your name and email. A published letter stores the sender name, the recipient name, the letter text, the template and scene you picked, the typing speed, an optional YouTube song, your account ID, its status and its dates.

Letters are text only. There are no photo uploads. Your draft stays in your browser until you create the letter. A report stores the letter ID, the reason you pick and any note you add. You do not need an account to report. We also keep a small count of how many letters your account made today and how many are active.

2. Who can read a letter

Anyone with the link can read a published letter. They do not sign in. Share it with care, because readers can save or forward it. Link previews only say "A love letter has been sent for you." and "Someone left you a letter to open." Names and letter text never go in links or previews.

3. Why we use data

We use data to sign you in, show your letters, handle deletes and fading, review reports, apply the daily limit and keep the site running. We do not sell letter content. There are no ads on Love Letters.

Firebase and Google Analytics and Cloudflare Web Analytics count events. Examples are a letter created, published, opened or finished, music played, a download and a click on Support. We never send letter text or names to analytics. These providers may also see technical data such as your device and browser. Their own policies apply.

4. Providers, music and support

Firebase and Google handle sign-in and storage. Cloudflare handles hosting and short-lived copies of letters at the edge. See https://policies.google.com/privacy and https://www.cloudflare.com/privacypolicy/.

If a letter has a song, a visible YouTube player loads from Google and YouTube. It may set cookies and may show YouTube ads. Music starts only after the reader taps Open. YouTube plays under its Terms of Service (https://www.youtube.com/t/terms) and Google's Privacy Policy.

Support runs through Ko-fi, Buy Me a Coffee or GCash. Their terms and privacy policies cover the payment details you give them. We do not see them. Giving buys nothing.

5. Keeping and deleting

A new letter fades after 1 week or 1 month, as you choose. The default is 1 month. Old letters from before v2 that have no end date fade on 2027-01-09. Faded letters stop opening and are removed by a daily cleanup.

You can delete a letter any time in My Letters. It is removed for good. We may take a letter down after a report. Saved copies at the edge can take a few minutes to stop showing. We cannot delete copies other people downloaded.

PDF, PNG and text downloads are made on your device. A local draft stays in that browser until you clear it or clear site data. To ask about your account data or about reports, write to us. There is no self-service account deletion yet.

6. Safety and your choices

Our database rules let only you manage your letters. Only the site administrator can read reports and take letters down. A public link is not private storage.

To ask for access, a fix or a deletion, or to make a privacy complaint, write to privacy@paulablaza.com. Your local data rights still apply.