Privacy Policy

Last updated: March 21, 2026

Our Commitment

Your time capsules are deeply personal. We designed Sealed from the ground up so that your capsule content is private -- not just from others, but from us.

Data We Collect

  • Account information: Email address and display name from your authentication provider.
  • Capsule metadata: Recipient email, delivery date, seal theme, creation timestamp, and delivery status.
  • Payment information: Processed by Stripe. We never see or store your card number.

Data We Cannot Access

We cannot read your capsule content. All capsule content -- letters, context data, photos, voice notes, and videos -- is encrypted with AES-256-GCM encryption before it is stored. The encryption keys are managed so that content can only be decrypted at delivery time. We have no ability to view, search, or analyze your sealed content.

Third-Party Services

  • Firebase Auth (Google) -- Authentication and identity management.
  • Stripe -- Payment processing. Subject to Stripe's Privacy Policy.
  • Resend -- Email delivery for capsule notifications and transactional emails.
  • Vercel -- Hosting and serverless infrastructure.

Analytics

We use Vercel Analytics to understand how people use Sealed. Vercel Analytics is privacy-respecting: it does not use cookies, does not track users across sites, and does not collect personally identifiable information. We track aggregate product events (such as capsules created and credits purchased) to improve the experience.

Data Retention

  • Capsule data is retained until delivery plus 30 days for re-reading, after which it may be archived.
  • Account data is retained as long as your account is active.
  • You may request deletion of your account and all associated data by contacting us.

Your Rights

You have the right to access, correct, or delete your personal data. You may also request a copy of your account information. Note that sealed capsule content cannot be retrieved before delivery due to encryption -- this is by design.

Contact

For privacy-related questions or data requests, contact us at privacy@openwhenitstime.com.