Privacy Policy

Snailmail helps you turn photos, ideas and messages into personal postcards and digital recipient experiences. This notice explains information handled by the website and postcard service.

Who to contact

Smail is operated by Jonas Hermann, Skanegatan 8C, 11645 Stockholm, Sweden, who is responsible for the personal information described in this notice. For privacy questions and requests, contact hello@smail.cards.

Information we collect and why

• Accounts: email, sign-in and session records identify you and give you access to your saved cards and orders.
• Your creations: photos, optional videos, designs, messages, AI instructions and results let us provide the creation features you choose.
• Recipients and orders: names, postal addresses, optional recipient information, order status and payment references support the postcard and recipient experience.
• Technical and support information: request/IP information, security and error records and support messages help us operate the service, prevent abuse and resolve problems. The service also uses first-party service and campaign events.

Purposes and legal bases

Where the GDPR applies, we process account and creation information to provide the service you request; technical and support information for our legitimate interests in operating and securing the service; and information required for legal recordkeeping to meet applicable legal obligations. Recipient details supplied by a sender support the sender’s requested postcard or address collection, subject to the recipient’s rights. Where optional processing requires consent, you may withdraw it without affecting earlier lawful processing.

Google Sign-In: access, use, storage and sharing

If you choose Google Sign-In, Google supplies your account identifier and basic profile information, including your email address, name and profile picture when available. We use this information to authenticate you, associate your saved work and orders with your account, and provide account support. We store account information on our server infrastructure and use session cookies to keep you signed in. We do not request Gmail, Google Drive or Google Contacts permissions through customer sign-in.

Google sign-in information is processed by our hosting infrastructure and may be accessed by authorised staff when necessary for account support or security. It is not sent to AI providers as input for postcard generation. We do not sell this information or use it to target advertising. We may disclose information if required by law or necessary to protect the service and users. You can revoke Snailmail’s access through your Google Account’s connections settings; revoking access does not itself delete account records already stored by Snailmail. To request their deletion, contact us.

Providers and sharing

Cloudflare provides hosting, database, file storage and security, and Stream for optional videos. Resend delivers sign-in and enabled service emails. Optional AI features send the prompts and selected images needed for your request to OpenRouter and its model providers. Their retention rules may differ; do not upload sensitive material unnecessarily. Stripe processes checkout and the printing provider receives approved artwork and recipient addresses for fulfilment. Payment providers handle full payment-card details directly.

When enabled, Google address services receive the address needed for suggestions or validation, not the postcard message. Recipients can see the content you choose to share with them. Treat recipient and address-collection links as private. Providers may process information outside Sweden or the EEA.

Optional analytics and advertising measurement

Your optional privacy choices apply across the website and postcard maker. With analytics permission, structured page, card and creation-step events help us improve the service. When configured and enabled, Google Analytics receives measurement events and Microsoft Clarity provides masked heatmaps and recordings only on eligible public marketing pages. Clarity does not record the postcard maker, uploads, editors, recipient links, account or admin views, or views showing personal content. Postcard messages, uploaded media, recipient names and addresses, search words, private URL tokens and raw URLs are excluded from measurement events.

Advertising measurement is a separate choice. When configured and you accept both analytics and advertising, Google Ads can use confirmed purchase events imported from Google Analytics. Consented campaign click identifiers can connect a visit to its advertising source. Advertising-only choices do not send purchases through Google Analytics in this version. Instagram, Facebook and TikTok measurement is not connected. Configured providers remain off until enabled and the relevant permission is granted.

Use Cookie settings on the website or Privacy choices in the postcard maker to change or withdraw permission. Withdrawal stops future optional measurement, suppresses queued deliveries and clears optional browser identifiers; essential sign-in, drafts, payments and delivery still work. Google and Microsoft apply their own retention policies: see Google’s privacy policy and Microsoft’s privacy statement.

Cookies and storage

When you choose an interface language, the smail.language cookie remembers your requested interface language on that website host for one year. This functional choice is separate from currency and from optional analytics and advertising consent. It does not translate your photos, artwork or messages.

Essential cookies support access-code admission, guest work, account sign-in and sign-in security. The website access cookie lasts up to 24 hours. Optional choices last up to 180 days; measured visits use a 30-minute inactivity window. After an optional grant, the choice cookie also retains a random withdrawal token, including after rejection, to enforce and retry your choices for earlier visits even after their journey identifiers expire. This token is used only to enforce privacy choices, not in reports or provider measurement; it is never sent to Google or Microsoft. A fresh rejection creates no such token. Consented campaign labels last up to 30 days and advertising click identifiers up to 90 days. See the cookie notice for provider cookies, storage names and settings. Browser storage also remembers draft choices. Clearing operational storage can remove access to unlinked guest work.

Internal browsing event records are retained for up to 90 days and anonymous daily aggregates for up to 13 months. Payment measurement and delivery records follow the retention of their underlying financial records. These periods do not replace the separate service retention described below.

Retention and deletion

We keep information for the purposes for which it is collected, including active drafts and accounts, support, security and applicable recordkeeping obligations. General abandoned-draft cleanup is not currently automatic . Uploaded videos are available for up to 90 days; provider deletion and backups may take longer. Contact us to request deletion of your account, Google sign-in information, uploads or recipient details. Information needed for outstanding requests, disputes or legal obligations may need to be retained.

Your choices and rights

You can use an alternative enabled sign-in method instead of Google and choose whether to use AI. Depending on applicable law, you may request access, correction, deletion, restriction or a portable copy of your information, object to processing or withdraw consent where processing depends on it. We may need to verify your identity. Email hello@smail.cards, including if someone else supplied your address. You may also complain to your local data protection authority, including IMY in Sweden.

Changes

We will update this notice as the service develops, and change the date above. This notice does not change checkout terms or sign you up for anything.

Back to Snailmail