Postcard Writer is a small, independently run project. Contact for any privacy question or request: info@postcardwriter.com.
| Data | Why |
|---|---|
| Email address | Sign-in (one-click link) and account identity |
| Uploaded photos (front/back) and postcard text/recipient details | To generate and send your postcard, and to show your "My Cards" history |
| Postcard recipient email address(es) | Delivering the postcard you compose. If a recipient unsubscribes (link in every postcard email), we keep a record of that address so we can honor the opt-out for any future postcard sent to it, by anyone — see Section 6. |
| Recipient mailing address (street, city, state, postal code, country), if entered | Entirely optional — prints a typed address block on the postcard back for cards printed at home, and lets you optionally have a real physical postcard printed and mailed via our print/mail vendor (see Section 3). Checked against that vendor's address-verification service as a best-effort "does this look right" hint; never required to send or download a card. |
| Photo location/date metadata (EXIF/GPS), if present | To auto-fill the postmark country/city/date — only if a photo has this embedded, never required |
| Content-moderation results for uploaded photos (automated classifier scores, and manual review outcome/date if a human reviewed it) | Every uploaded photo is automatically screened before it can be used, to keep the Service from being used to generate or send prohibited content — see Section 3 and the Terms of Service |
| Saved contacts (name, email, cell phone, mailing address), if you choose to save any | Optional address book so you can reuse a recipient's info on future postcards instead of retyping it, and to mail the same postcard to several saved contacts at once. Cell phone numbers are stored only — we don't currently use them to send anything (see Section 3). |
| IP address | Abuse/rate-limit prevention on sign-in and account actions |
| Usage events (which AI filter used, when, cost) | Enforcing monthly usage limits and understanding overall service cost — not shared or sold |
Providing the Service means some data necessarily passes through a small number of third-party providers, each only for the specific purpose below:
We don't sell your data, and we don't share it with advertisers today. (If a future ad-supported free tier is introduced, this policy will be updated first, and any ad-related data sharing will be disclosed here and in the Cookie Policy.)
See the Cookie Policy for the full list. In short: one essential session cookie to keep you signed in, and cookies set by Google reCAPTCHA for bot detection. No advertising or analytics cookies at this time.
Your account, uploaded images, and sent-card history are kept until you delete a card yourself (via "My Cards") or ask us to delete your account. There's currently no automatic expiry — deletion is manual, either self-service per-card or by contacting us for full account removal.
Two things are kept even after you delete your account:
Export is self-service: choose "Download my data" from the account menu at any time to download a copy of your account profile, sent-card history, and stored images. Do this before deleting your account if you want to keep a copy — deletion removes this data permanently (see Section 5 for the one narrow exception).
Deletion is self-service: choose "Delete my account" from the account menu at any time to immediately and permanently delete your account, your sent-card history, your saved contacts, and your stored images. This can't be undone and doesn't require contacting us. The one exception is described in Section 5: anonymised transaction and usage records are kept for business and tax purposes, stripped of any link to you.
Recipients can opt out: every postcard email includes an unsubscribe link. Following it stops that address from receiving any future postcard email through Postcard Writer, regardless of which account sends it — this applies even to people who've never created an account themselves.
For anything else — telling you what data we hold or correcting it — contact info@postcardwriter.com.
Sign-in links and session tokens are never stored in readable form — only a one-way hash. We take reasonable measures to protect your data, but no online service can guarantee absolute security.
The Service isn't directed at children under 13, and we don't knowingly collect data from them.
We may update this policy from time to time; the version/date at the top of this page reflects what's currently in effect.
← Back to Postcard Writer