Privacy

Who’s responsible

Jake Robert Powney, trading as Stampgoose, is responsible for your personal data (the “controller”, in data protection terms).

Address: 15 Dargle Rd, Sale M33 7FN, United Kingdom
Email: hello@stampgoose.com

If you send an envelope

• Your email address, from Stripe when you pay, or when you sign in. We use it to send your receipt, to tell you when your envelope is first opened, and to sign you in.
• What you put in the envelope: the names on the front, letters, photos, films, captions, when it opens and the passphrase hint. The passphrase itself is scrambled so that nobody, including us, can read it back.
• Payment details: Stripe handles your card, so we never see the full number. From Stripe we get the amount paid and the country of your billing address.
• Reminders, only if you tick the box at checkout: your email and your billing country, so a reminder arrives before the right date where you live.
• When you agreed to the terms at checkout, so we can show you agreed it could be sealed straight away.

If someone sends you an envelope

We hold your name as the sender wrote it, your email address if they asked us to email you the link, and when the envelope was first opened, which we pass on to the sender. We use your email only to send you that envelope. We don’t add you to anything.

If you’re just looking

• Analytics: we count visits with Plausible, which uses no cookies and collects nothing that identifies you.
• Cookies: only the ones the site needs to work. They keep you signed in, protect forms from forgery, and remember the currency you picked. None of them track you around the web.
• Your browser’s storage: it remembers the drafts you’ve started and the envelopes you’ve unlocked, so you don’t have to start again or retype a passphrase. It stays on your device.
• Server logs: like any website, ours briefly record IP addresses, to keep the site running and to stop abuse, such as someone guessing passphrases.

Why we’re allowed to use it

• To do what you asked, a contract in data protection terms: making, delivering and letting you change your envelope, your receipt, signing you in, and emailing a recipient when you ask us to.
• Legitimate interests: keeping the site secure, stopping abuse, and working out what to improve from counts that don’t identify anyone.
• Your consent: reminder emails. Every one has a one-click way to stop them.
• The law: keeping payment records for tax.

Who else handles it

We don’t sell personal data or share it for advertising. These companies handle it for us, only on our instructions:

• Stripe, for payments. Stripe is also responsible in its own right for the card data it holds. See Stripe’s privacy policy.
• Our hosting and file storage providers, who run the site and store envelopes, photos and films.
• Postmark, which delivers our receipts, sign-in codes, envelopes and reminders. We don’t turn on its open or click tracking. See Postmark’s privacy information.
• Plausible, for analytics that don’t identify you.

Some of them may handle data outside the UK. When they do, it’s covered by safeguards UK law accepts, such as the standard contract terms the Information Commissioner approves.

How long we keep it

• Unpaid drafts: deleted 90 days after they were last changed.
• Uploaded films: deleted a year after the envelope is first opened.
• Everything else in a paid envelope: for as long as Stampgoose runs, so the link keeps working, unless you ask us to delete it sooner.
• Sign-in codes: they work for ten minutes and are deleted the day after.
• Your account: until you ask us to close it.
• Reminders: until you stop them. After that we keep only a note not to email you again.
• Payment records: as long as tax law needs, which is up to ten years for EU VAT.

Your rights

You can ask for a copy of what we hold about you, ask us to correct it or delete it, object to how we use it, or ask us to limit what we do with it. Where it’s based on your consent, you can take that back at any time. Email hello@stampgoose.com and we’ll reply within a month.

If you sent an envelope and want it gone, email us from the address you paid with and we’ll delete it. If you received one and want your details removed, email us and we’ll take them out.

If you’re not happy with how we’ve handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk. We’d like the chance to put it right first, though.

Changes

If this notice changes, the date at the top changes too. If it’s a change that matters to how we use what you’ve already given us, we’ll email you first.

The rest of the deal is in the terms.