Privacy

Letters sent by a private link

The server stores a letter ID, encrypted letter text, an encryption IV, its creation and delivery times, its expiration time, and whether it is a one-time letter. The decryption key is placed in the private link after the # symbol and is not sent to the letter API.

You choose an expiration of one hour, 24 hours, seven days, or 30 days. After that time, the letter API will no longer return the letter. A one-time letter is deleted from the letter database when it is first successfully opened. A scheduled cleanup runs daily and permanently deletes expired letters from the database, normally within 24 hours after expiration.

Temporary Dove mailboxes

For a mailbox, the server stores the mailbox ID, display name, public encryption key, a hash of the private read token, creation and expiration times, and encrypted message envelopes. Each message record includes IDs used for the mailbox and conversation, whether it is sent or received, encrypted text, an IV, a wrapped encryption key, and a creation time.

Mailbox messages are encrypted in the sender’s browser. The private mailbox key stays in the private mailbox link and in that browser’s local storage. Mailboxes can last one hour, 24 hours, or seven days. After expiration, the APIs stop returning the mailbox and its messages. The daily cleanup permanently deletes the expired mailbox and all messages stored in it, normally within 24 hours after expiration.

Information stored in your browser

Local storage may hold your mailbox ID, private mailbox key and read token so the mailbox can reopen on that device; a random visitor ID for Site Stats; your light or dark theme choice; an owner-only setting that excludes visits from Site Stats; and an owner-only Site Stats access key when supplied.

Session storage may temporarily hold a letter or reply while you move between the letter writer and mailbox, plus the time used to count a new analytics session. Session storage normally disappears when the browser session ends. Sent by Dove’s own code does not set cookies.

Site Stats

The site sends an event type, random visitor ID, and page name to its own Site Stats service. The service stores aggregate event counts, page-view counts, daily and monthly counts, and a monthly marker tied to the random visitor ID so unique visitors can be counted. The tracking code does not store letter contents in Site Stats.

Hosting and request logs

Sent by Dove is hosted on Cloudflare. Like other hosting providers, Cloudflare may receive IP addresses and standard request information when your browser connects to the site, and may keep standard service or security logs under its own practices.

Contact and feedback

If you use the contact form, the site sends your message and any name, email address, rating, or feedback type you provide to the site owner through Cloudflare Email Routing. The contact handler does not save those submissions in the site database.

Questions

For privacy questions or requests, use the Contact Us page.