BETA INFORMATION · 18 OCTOBER 2026

Your words deserve care.

This notice describes the beta. Letterfloret is run by a UK sole trader trading as Letterfloret. The public postal contact address is on our Terms page. Retention periods and the full notice for paying customers will be completed before the public paid launch. For privacy questions, email support@letterfloret.com.

Accounts and card content

Organiser accounts store your name, email address, a password hash and account-verification and session records. Your password is not stored as readable text. Cards contain the recipient name, title, group name, design, dates, messages and any photos or voice notes you add. Contributors do not need an account.

Who can read a card

The organiser can review every message. Anyone with the signing link can read ordinary, visible messages. Choosing “Only the organiser and recipient” hides a message from that signing page. The finished card shows all visible messages, including those marked private, to anyone with the recipient link once its opening time arrives. These links do not grant organiser access. Share them only with the intended people.

Storage, email and payments

Account records, cards and private media are stored on the service’s DigitalOcean server. Resend sends account verification and password-reset emails when registration is open. When checkout is enabled, Stripe collects and processes payment details on its hosted payment page. Letterfloret stores the payment reference, amount, currency and payment state, but does not receive your full card number or security code.

Deletion and backups

Organisers can hide messages or delete a card. Deleting a card removes its content from the active application and disables its links. Copies may remain in operational backups until those backups expire. There is no automatic card expiry during this beta. Backup retention and payment-record retention will be published before the paid launch.

Necessary storage and analytics

Necessary sign-in cookies keep organisers signed in. Your browser stores a choice about analytics and a secret that lets you edit your own message on that device; clearing browser storage can remove that editing ability. To limit repeated submissions, the app stores a hash derived from the card and the submitting connection’s IP address with each message. The app does not enrol contributors into marketing. It records the source reference when a new card is created through a referral link.

With your permission, we use Google Analytics 4 to understand visits to public pages and improve the site. It may use first-party _ga cookies and share browser, device and visit information with Google. We send public page paths only, without query strings, card IDs, signing links or account pages. We do not use it for advertising. Google Analytics is off until you accept; rejecting it does not affect the card service. Use “Cookie settings” at the bottom of any page to change your choice. Rejecting after acceptance stops further analytics and removes its first-party cookies. See Google’s privacy policy for its processing.

Questions during the beta

Email support@letterfloret.com for access, correction or deletion requests. Do not add sensitive or irreplaceable content while the service is being tested.