Privacy

Last updated 27 August 2026

Sealedwith should be safe to use. This page says what we handle, why, and for how long — including the parts that are easy to leave out.

1. Who is responsible

Sealedwith is the controller for the processing described here. Questions go through the contact form.

2. What we handle

• What is in the message — the line you write, a photo if you add one — including the technical information in the file — and a voice recording if you make one.
• Names — the first names you choose to put on the envelope, if you fill them in.
• Locks — a password is stored only as a cryptographic hash, never as text. A question and its accepted answers are stored so the answer can be checked.
• Email addresses — only if you ask us to mail your two links to yourself. We send that one email and keep a record of the address it went to, so that a message mailed to the wrong person, or to someone who never asked for it, can be traced. The record is erased together with the message.
• Technical data — timestamps, and whether a message has been opened.
• IP addresses — the sender’s when a message is created, and the recipient’s when it is opened, so that abuse can be prevented and investigated. Both are erased together with the message. We also use a one-way hash of the IP address to limit spam and guessing.
• What you write to us — if you use the report and contact form we keep your message, your email address so we can answer, your name if you give one, and a hash of your IP address.
• Reports about a message — we keep the reason you give and a hash of your IP address.
• A security log — suspicious events against the service, such as repeated wrong guesses at a key, spam blocks, and automated scanning for vulnerabilities. It holds the time, the IP address, the address that was called, and the browser identification string. It is used only to protect the service and is deleted after 90 days.

3. Why we handle it

To deliver the service you asked for — create the message, show it to the recipient, check locks, send the mail you requested — and to protect the service from abuse. The legal basis is performance of the service you requested, together with our legitimate interest in a service that is not abused.

4. How long we keep it

A message can be opened for seven days. After that it cannot be opened at all. The contents — the line, the photo and its original, the voice recording, any email address and any stored IP addresses — are erased shortly after that window closes.

If you delete a message yourself from your management link, it closes immediately: neither the recipient, the management link, nor the media link reaches it any more. For safety the content stays on the server for up to 30 days after that, so that a report arriving after the deletion can still be looked at, and is then erased automatically. During that time only we can reach it.

Where a message has been reported or blocked, it is kept until the matter is dealt with.

A photo or recording you uploaded but never sent — you started a message and left it — is kept for 30 days and then erased. It is not linked to any message and nobody can open it, but it stays that long so that anything breaking the rules can still be dealt with.

The security log is deleted after 90 days.

What you send through the report and contact form stays until the matter is dealt with and we delete it by hand. Ask us to remove it sooner and we will.

5. We do not share it

We do not sell your content and we do not pass it to anyone for marketing. The message is available to whoever you give the link to. The data sits with the provider that runs our web server and database, who processes it on our behalf.

6. Cookies and statistics

We use Google Analytics to see how the service is used — which pages are visited and roughly how many visitors there are. It uses cookies, we see the results in aggregate, we do not use it for advertising, and we do not try to identify anyone from it. Google processes this on our behalf, which can mean transfer outside the EU/EEA. We use no advertising cookies. You can block statistics cookies in your browser or with Google’s opt-out add-on.

Separately, we count how far people get through the steps of creating and opening a message. That counting uses a random number your browser makes up for the visit and forgets when you close the tab. It carries no IP address, no cookie, and no free text — only a fixed list of step names. We keep it for 90 days, then it is deleted.

While you are making a message, it is kept in your own browser so that a reload does not lose what you have written. That copy never leaves your device, it is erased the moment the message is sealed, and it falls away by itself after a day. Nothing else is stored in your browser.

To get back to a message you have already sent, use the management link you were given when it was sealed.

7. Your rights

Under the GDPR you have the right to request access to, correction of, or erasure of your personal data, and to object to certain processing. Get in touch through the contact form and we will help.

8. Children

The service is for people aged 18 and over and is not directed at children.

9. Changes

We may update this policy as the service develops. For anything substantial we update the date at the top.