Privacy

You upload documents that carry your name, address and identifiers. This page says plainly what happens to them.

The document itself is never stored. It is held in memory for the seconds the read takes, sent to the model provider that produces the answer, and discarded. There is no archive of uploads, no training on your documents, and no analytics on their content. The file's name is not kept either.

What we keep, and for how long. The explanation of your letter and a fingerprint of the file, from which the file cannot be rebuilt: 30 days, so your result link works and uploading the same letter again costs nothing — then both are deleted. A counter per internet connection that enforces the free allowance: 3 days. If you buy a pass: your email, your purchases and a reads counter, kept as the record of the purchase, and the payment provider's notification about it: 30 days. That is the entire list.

If you track a letter, we keep your email address, your language and time zone, and for each letter what its reminders and its page need — type, dates, sender and reference, your note, and the read it came from, if any — encrypted with a key kept apart from the database. Signing in sets one cookie that holds a random value, not your address. Reminders go out through our email delivery provider, which sees the address and the reminder. All of it stays until you delete it: a letter on its page, everything at once on the account page. A letter marked as done is deleted 180 days later, an unconfirmed request 48 hours later, and an account left unused for 2 years with no deadline still running is deleted with everything in it.

If you send a letter to our Telegram bot, Telegram keeps the chat as it keeps any conversation. We download the file only to read it, exactly like an upload here, and keep nothing of the chat — no file, message or account number — only a counter of today's free read, keyed by a one-way hash of your Telegram ID. The read itself is kept like any other (see above).

The document's content is sent to exactly one third party: the model provider that reads it, under a contract that forbids training on it. Payments are handled by the payment provider; your card never touches our servers. Site analytics are cookieless and never see document content.

Result links are unguessable and excluded from search engines. To delete a result or your pass records before these periods end, write to the address in the footer.

The pages themselves fetch nothing from anyone else. Fonts, styles and scripts — the visit counter's included — are served from this site, so simply reading a page announces you to no one else. The counter sets no cookie.