Privacy Policy
Last updated: October 2026
1. What We Collect
To provide the service, we collect: your email address (for your account), recipient name and email (for delivery), an optional backup contact email, and the content you create (message text and media), which is encrypted in your browser before it reaches us.
2. How We Use It
We use your information to create and deliver your capsules, send delivery confirmations, provide support, and keep the service running. We do not sell your data to third parties.
3. Encryption
Your message and media are encrypted in your browser using AES-256-GCM before storage. We store only the encrypted ciphertext. The decryption key is stored alongside your capsule so the service can construct the delivery link when your delivery date arrives. Decryption happens in your recipient's browser. See our security page for full details.
4. Third-Party Services
Time Capsule is built on Base44, which provides hosting, database, and authentication. Payment processing is handled by our payment provider. These services may process transaction data and account information as needed to operate the service.
5. Data Retention
We retain your capsules until they are delivered or you delete them. Delivered capsules may be retained so recipients can reopen the link. If you delete your account, your capsules and personal data are permanently removed.
6. Your Rights
You can view, edit, or delete your capsules at any time before they are locked. Once locked, a capsule cannot be changed to guarantee your recipient receives what you wrote. You can delete your account at any time. To request data export or deletion, visit our contact page.