Privacy

We keep what we need to deliver a box and nothing else.

• —Card details never touch our servers.
• —Recipient addresses are stored to ship the box, and are visible only to the operator and the sender.
• —Opt-outs are stored as a salted hash, never as a readable address.
• —Analytics are cookieless. There is no banner because there is nothing to consent to.

Memorial pages. When you place an order you are asked to agree that your own order history — the boxes you sent, the messages you wrote and the dates you sent them — may be published on a memorial page about you, after your death, if you or a person you have nominated requests one. This covers your own activity only. It never includes a recipient’s name, address, phone number or email, and it never includes anything about an order somebody else placed. Consent is recorded per order, defaults to agreed, and can be withdrawn at any time by writing to us; withdrawal applies to every order you have placed and is permanent unless you ask us to restore it. No memorial page exists today and none will be published without a documented request and a verification process.

TODO — this is a plain-language summary, not a reviewed privacy policy.