Privacy Policy

Effective October 4, 2026

McMac Media LLC, a Delaware limited liability company, operates Send a Love Letter. This policy covers our U.S. card-ordering service and information about both buyers and the people they send cards to.

Information we receive

• Your message, chosen card and handwriting, sender and recipient names and mailing addresses, order-support email, and any requested occasion or mailing date. Recipient information usually comes from the sender, not directly from the recipient.
• Payment identifiers, amounts, payment and fulfillment status, terms acceptance, referral codes, and limited campaign information. Stripe collects payment details through its payment interface; we do not store full payment card numbers or security codes.
• IP addresses, request and browser information, error information, and security records generated when you use the service. Support requests contain the information you choose to send us.

Please do not include payment card details, government identifiers, medical records, or other unnecessary sensitive information in a letter or support email.

How information is used

We use this information to take payment, produce and mail cards, provide order support and service notices, handle refunds and disputes, prevent fraud and abuse, honor referral commitments, meet legal obligations, and assess aggregate sales and campaign performance. We do not use the text of your letter to target advertising. Entering an order-support email does not subscribe you to marketing.

Service providers and disclosures

Stripe processes payments and related fraud information. Handwrite receives the message and mailing details required to fulfill the card. DigitalOcean hosts our application. Mail-delivery providers process service correspondence. Asset and font providers, including Cloudinary and Google Fonts where used, receive network information when your browser requests their resources. These providers may process information under their own terms and privacy notices as well as their agreements with us.

We may disclose information when reasonably necessary to comply with law, protect people or the service, resolve disputes, or complete a business transfer subject to appropriate protections. We do not make customer letters or recipient addresses public as part of our sharing features. A person you choose to mail a card to will receive its contents and may see sender/return-address details on the physical mail.

Browser storage and tracking

The composer keeps a draft in this browser tab's session storage so you can move between steps. Use Clear draft to remove it. Session restoration by your browser can preserve a tab; drafts older than 24 hours are discarded when the composer next checks them. Completing a purchase clears the draft. This does not delete the order held for fulfillment or support.

Referral identifiers may remain in local storage; referral attribution expires when checked after 14 days. Payment, security, and order-status features use necessary browser or server storage. You can clear site storage in your browser, but doing so may remove a draft or a secure status link.

Google Analytics collection has been disabled for this release, and we do not load Meta or TikTok advertising pixels. Earlier versions used Google Analytics, which may retain previously collected data under its retention settings. Disabling collection does not itself erase historical records. We do not currently use third-party cross-site advertising measurement on these pages. Payment and asset providers may receive information under their own policies. We do not change essential processing in response to Do Not Track; because nonessential advertising analytics is disabled, it remains disabled when Global Privacy Control is present too.

Retention and security

We retain order information for fulfillment, support, refunds, disputes, fraud prevention, and applicable recordkeeping. Unresolved, scheduled, disputed, and legally held records can require longer retention. Minimal financial and duplicate-fulfillment records can be retained separately from message content. Deletion requests are reviewed against these needs; provider systems and backups can have separate retention cycles. We do not promise that all copies disappear immediately or on one fixed date.

We restrict access and use technical safeguards, but no system or postal service can guarantee absolute confidentiality or security. Secure status links act as access credentials: keep them private. Public status pages do not display the letter or postal address.

Your requests and recipient concerns

Email hello@sendaloveletter.com to request access, correction, deletion, or information about applicable privacy rights. State whether you are the buyer or recipient and provide only the details necessary to locate the record. We may seek proportionate verification and may retain information when legally permitted or required. We will explain an applicable limitation and how to raise a concern about our response. We do not disclose another person's private information merely because someone requests it.

If you receive unwanted or abusive mail through the service, use the same contact with the subject Recipient safety. Do not submit another order to contact someone who has asked not to receive mail from you. Random Kindness is paused while recipient permissions and safeguards are reviewed.

Children and service area

Purchasing is limited to adults aged 18 or older in the United States, for delivery to the 50 states and Washington, DC. The service is not directed to children under 13. Contact us if you believe a child has provided information directly to us. Do not supply unnecessary personal information about children.

Changes and contact

We will post the current policy and effective date here. For material changes, we will provide a conspicuous notice on the site and, where appropriate or required, notify affected customers using available contact information before the change takes effect. New uses requiring consent will not be authorized merely by updating this page.

Privacy contact: McMac Media LLC, hello@sendaloveletter.com.