Privacy Policy

SnailPostal is operated by Eric Park, and we are responsible for the data described below. Email snailpostal@gmail.com with any question about it.

Your account. Your email address, a scrambled (hashed) version of your password — never the password itself — when you set one, and the date you confirmed your email by using a link we sent.

Your subscriptions and where mail goes. For each club you subscribe to: the tier, the status, when you joined or canceled, and the mailing address you gave. When you change an address we keep the old one alongside the new one, marked with the dates it was in use — a shipment sent to an old address has to stay explainable months later when someone says “this never arrived”.

Payment records. For each charge: the amount, currency, the club, whether it succeeded, and Stripe's identifier for it. The card itself lives at Stripe, not here.

If you run a club. Your club page content, the images and video you upload, and the identifier of the Stripe account you connected. Your subscribers' emails and addresses appear in your roster and the address export you download for mailing.

Site activity. When you view a club page we record the club, the category, the page you came from, your browser's user-agent string, and a random visitor id kept in your browser's local storage. That's how a club can see that, say, Instagram sent it more subscribers than Google. The id isn't tied to your name, and we don't use it to build a profile of you across other sites.

Card numbers, bank details, and payout information — those go to Stripe, and card data never touches our servers. We don't buy personal data, we don't sell or rent it, and we don't run advertising or third-party tracking pixels on the site.

The club you subscribe to. Your email and current mailing address, so they can mail you, plus your tier and subscription status. A club only ever sees its own subscribers.

Stripe processes payments, as the payment processor for both us and the club. Their handling of your card is covered by their own privacy policy.

Amazon Web Services hosts the site, the database, uploaded images, and sends our email. They process data on our behalf and don't use it for anything else.

That's the whole list. We'd also hand over data if the law required it, or transfer it if the business were sold — in which case this policy follows it.

Account and subscription records stay while your account is open, because they are what makes the service work. Payment and address history is kept for tax, accounting, and dispute reasons even after a subscription ends. Site-activity records are kept to give clubs their traffic and referral numbers.

We don't keep things indefinitely for no reason, but we'll be straight with you: we haven't yet automated a fixed retention window for old site-activity records. Until we do, ask and we'll delete yours.

Without asking us: update your mailing address, see every club you subscribe to, and cancel a subscription from your subscriptions page. Club owners can edit or unpublish a club page from the dashboard.

By emailing snailpostal@gmail.com: ask for a copy of what we hold about you, have something corrected, or have your account and data deleted. There is no self-serve delete button yet — we do this by hand, so allow us a few days. Depending on where you live you may also have the right to object to some processing or complain to a data-protection regulator.

Deleting your data ends any active subscriptions: a club can't mail someone whose address we no longer hold. We may keep the minimum needed for tax and fraud records.

We set a signed cookie when you log in — one for club owners, one for subscribers — so the site knows it's you on the next page. They're necessary for logging in and can't be turned off while staying signed in. We keep a random visitor id in your browser's local storage for the referral counts described above. No advertising cookies, and nothing shared with ad networks.

Passwords are hashed with a per-password salt. Login cookies are signed so they can't be forged, and links we email for setting a password work once and expire. The database is encrypted and not reachable from the public internet. Sensitive actions — exporting a roster, changing an address — are written to an internal log that records who did what, by account id, without copying the data itself.

No system is perfect. If we ever discover a breach affecting your data, we'll tell you and the relevant regulator as quickly as we can.

SnailPostal isn't for children under 13, and we don't knowingly collect their data. Our infrastructure is in the United States, so if you're elsewhere your data is processed there.

If this policy changes in a way that matters, we'll date this page and email account holders. Our terms of service cover the rest of the relationship.