Privacy

This version does not have accounts. Letter text is kept in your browser’s session storage so you can preview and download it. It is not written to a database here. If you close the tab, we cannot retrieve it.

A tracking search puts the number in the page address and sends it to this site’s server so the result can be rendered. We do not store that number in a database in this version. Server logs kept by the host may briefly include the address of the page.

If the operator sets TRACKING_PROVIDER to 17track, aftership or trackingmore and sets TRACKING_API_KEY, the tracking number is also sent to that provider. With no key, detection stays on this server and uses the number format only.

Card payments, when Stripe keys are set, are taken by Stripe on Stripe Checkout. We do not see the full card number. Stripe’s own privacy notice applies to that payment. Demo mode, used when no Stripe secret key is set, does not ask for a card.

The contact page opens your email app. The message is not submitted to a form on this server.

This version does not set advertising cookies. Stripe’s checkout, on Stripe’s domain, uses Stripe’s cookies when you pay there.

The site may be hosted on Hostinger or Vercel. Where the request is processed depends on that host. We do not sell personal information.

You can ask for access, correction or deletion of personal data the operator actually holds. In this version that is likely to be correspondence you email us, not the letter draft. Contact the address on the contact page. You can also complain to the Information Commissioner’s Office.

Before a public launch, add the legal name of the operator, a postal address, and any ICO registration number. Those are not invented here.