Privacy Policy

What we collect

• Email address – Required to create an account and sign in. Your email is only used to send and receive messages on this platform. We will never share your email with third parties or use it for promotional purposes.
• Name (optional) – If you provide one, it's used for display purposes only.
• Messages you write – The content, recipient name, and recipient email address are stored so we can deliver messages. We do not access or read your messages – only the sender and recipient can see the content. The sole exception is when a message is reported for abuse, in which case it is reviewed by an administrator for moderation.
• Message metadata – Read status, timestamps, and whether a reminder email was sent.
• Reports – If you report a message, the reason you provide is stored for moderation.
• Usage data – We use Google Analytics to collect anonymous usage statistics such as page views and browser type. No personally identifiable information is sent to Google Analytics.

What we don't collect

We do not collect passwords (we use magic link authentication), payment information, IP addresses, or location data.

How we use your data

• To operate the service – delivering messages, managing credits, and maintaining your account.
• To send you emails – magic link login, new message notifications, and a one-time reminder if a message goes unread for 7 days.
• To moderate – reviewing reported messages and enforcing our rules.
• To understand usage – anonymous analytics help us improve the product.

Anonymity & message privacy

Your identity is never revealed to message recipients. Recipients see the message content and their own name – not who sent it.

We cannot read your messages. Message content is only accessible to the sender and recipient. The only exception is when a message is reported for abuse – in that case, the message content is shown to administrators solely for moderation purposes.

Cookies

We use one cookie:

• session – An authentication token that keeps you signed in. It expires after 30 days, is HTTP-only, and cannot be read by JavaScript.

We also store your theme preference (light/dark) in your browser's local storage.

Third-party services

• Resend – Delivers emails on our behalf. Receives recipient email addresses only as needed to send each email.
• Google Analytics – Collects anonymous usage statistics.
• Vercel – Hosts the application.

Data retention

• Your account and messages are retained as long as your account exists.
• Messages are permanent by design – they cannot be edited after sending.
• You can delete messages you've received from your inbox.
• Magic link tokens expire after 15 minutes and are single-use.

Your rights

You can request access to your data or ask us to delete your account by contacting us. Deleting your account removes your profile and associated data.

Contact

For privacy questions, email us at hello@pre-post.com.