What we keep, and what we promise

The short version

Your letters are yours. We keep them so you can find them again, we put them in front of the person you addressed them to, and we do nothing else with them. Nothing about you is sold or rented. There is no advertising here. Nobody reads your letters.

What we keep

Every letter you write, whole — the words, who it was for, and when you sealed it. That is the product: say it, keep it.

Your name as you last gave it, and your email address, which is how we know which letters are yours and where to send them.

A plain record of what happened to each letter, with dates: sealed, delivered, cherished.

If somebody writes a few words back when they cherish your letter, we keep those and show them to you.

What never happens

The words inside a letter never enter a log, an error report, or any measurement of how this place is doing. That is enforced in the code and checked by the build, not left to anyone remembering.

No letter's words appear on any screen we use to run this. Those screens are built so that they cannot show them.

There is no tracker here that follows you anywhere, and nothing about you goes to an advertiser, because we have none.

Reading a letter asks nothing of you

If somebody sends you a letter, you can open it, read it, and cherish it without giving us anything at all. No address, no name, nothing to fill in, ever. That page carries no outside scripts, tells search engines to stay away, and hands nothing about you to anyone.

Who else touches it

Three companies help us run this, and each one sees only what it needs to do its job: Vercel serves the site, Supabase holds the database, and Resend sends the mail.

When something breaks we get an error report through Sentry, with letters, names, and email addresses stripped out before it leaves this building.

If we ever add a way of counting how many people finish a letter, it will not be allowed to see a word of one. That rule comes first and the tool comes second.

Cookies

One, and only after you ask us to keep you here on this device. It lasts ninety days and does nothing but remember that it is you. There are no advertising cookies on this site.

Taking a copy

Any time, free, from your letters page: one file holding everything we have of yours, in a form a machine can read. That is a right rather than a feature, and it will be free forever.

Asking us to erase you

Write to post@tubariki.com and we will erase you within thirty days. Not hidden, not switched off — erased. There is no button for it yet, so it is done by hand, and thirty days is the promise either way.

Here is the hard part, and it deserves saying plainly. The letters you wrote are yours, so erasing you erases them — including the copies in the hands of the people you sent them to. A letter somebody cherished will stop opening. We chose that over keeping your words after you asked us to erase you. Take a copy first if there is anything in there you would miss.

One thing survives it: a small security record of who reached what, and when. A record of that kind cannot be erasable by the person it is about, or it was never a record. It names actions, never words.

Closing a link

A letter's link is the letter — anyone holding it can open it, which is also how forwarding works. If it reaches somewhere it should not have, you can close it from your letters page and it stops opening.

Closing tells the other person nothing. Nothing is sent, nothing is announced, and what they already read they already read.

Keeping it safe

Letters are encrypted on their way to us and encrypted where they are stored. A letter's link carries a hundred and twenty-eight bits of randomness, which is far past guessing. Reaching your own letters takes a six digit code sent to your address, and a code is good for fifteen minutes.

The terms, briefly

Sending is free, and it stays free.

Your words remain yours. What you give us is permission to keep them and to put them in front of the person you addressed them to. Nothing else, and nowhere else.

Write to people, not at them. If Tubariki is used to frighten, harass, or deceive somebody, we will close the link and the address behind it.

This is built for adults. If you are under sixteen, ask someone who is not before you start.

We tend this carefully, but we cannot promise the site will never be down or that every email will arrive. Keep your own copy of anything you could not bear to lose. That is what taking a copy is for.

If these words change in a way that matters, the date at the top changes with them.