ENCRYPTED AT REST
Sealed before storage.
Each new letter is encrypted with its own key before it is stored. The database holds ciphertext and protected keys, rather than readable letter text.
PRIVACY & SECURITY
Your correspondence
is personal.
Yours, &c. is built to deliver letters, not to turn them into a product.
WHAT WE KEEP
Only what the post needs.
We keep the names, email addresses, locations and journey details needed to deliver a letter and let you find it again. We do not sell personal data, use correspondence for advertising, or put letter text in notification emails.
You can delete a letter from My letters. While an ordinary letter is travelling, its sender can also unsend it.
ACCOUNT-BASED ACCESS
The link is not enough.
An arrival link identifies a letter, but the recipient must also sign in with the exact addressed email account before opening it. The service decrypts a letter only to show it to its authorised sender or recipient.
WHAT ENCRYPTION MEANS
Protection for stored letters.
This is encryption at rest, not end-to-end encryption: the service can decrypt a letter to deliver it to an authorised account. It protects letter contents if the database is exposed.
EMAIL & CONTROL
Keep the envelope private.
Sign-in and arrival emails contain a link and essential account information, never your letter’s contents. If you did not request a sign-in link, you can safely ignore it.