Privacy

What you give us, what we collect on our own, who else sees it, and how long it stays.

Effective 28 August 2026.

Who we are

250 High Street LLC operates Cellpostal from the United States. You write a card or a letter on your phone. We print it on paper and mail it.

There is no account, no login and no password. You give us what one piece needs, and nothing more. The rules of sale are on the terms page.

What you give us

You type or draw all of this while you write a piece:

• The message text.
• Your email address. We need it for the receipt and the tracking link.
• The recipient's name and full postal address.
• Your own return name and postal address.
• A signature, if you draw one with your finger. We keep it as a small image.
• The pen colour and the format you pick.

Our interface asks for nothing else. There is no profile and no marketing list.

What we collect on our own

Four things, and no more than four:

• A visitor id. Your browser makes a random one and keeps it. It joins the steps of one writing session to the sale at the end. It carries no name and no email address.
• One word about your browser. Every browser tells every website what it is. We read that once and sort it into one of five words: human, internal, robot, crawler or agent. We store the word and throw the text away.
• Your IP address, the number that identifies your internet connection. We use it to cap how often anybody can create a piece. It sits in memory for one hour. The database holds no column for it.
• Server logs. A refused rate limit writes your IP address to the log. Every address check writes the recipient's city, state and ZIP code to the log. Our hosting company holds those logs under its own rules.

We do not read the page you came from.

Cookies and analytics

There are none. This is worth saying plainly:

• We set no cookie and we read no cookie.
• We run no analytics, no tag manager and no tracking pixel.
• We load no font and no script from another company.
• We send your browser a rule, the Content Security Policy, that stops our page from contacting any other website.

Nobody follows you here, and nobody follows you away.

What your browser keeps

Read this part if you share a device with somebody.

Your browser saves some of your work on your own device, so you do not retype it. Nothing removes it on a timer. It stays until you clear it.

It holds:

• your email address, your return address and your drawn signature
• the random visitor id
• your pen colour
• your last piece: the message text, the recipient's name and the recipient's address

It sits under the names cellpostal:sender:v1, cellpostal:visitor:v1, cellpostal:pen:v1 and cellpostal:piece:v1.

The next person to use that device can read all of it. To remove it, open your browser settings and clear the site data for cellpostal.com.

Who else sees your data

Five companies, each with a job. This is everything each one receives.

Stripe, for payment

Stripe gets the id of your piece, the amount, and a product name: either "Cellpostal 5½×4⅛ card" or "Cellpostal Letter". Stripe never gets your message, your addresses or any name. You type your card details on Stripe's own page, never on ours. Stripe sends us back the payment status and the email address you typed there.

Click2Mail, the mail house

Click2Mail prints your piece and posts it. It gets the finished print file, which holds your message text and your signature. It gets the recipient's name and full address, and your return name and address. It also gets both addresses at the checking step, before you pay. It files an address list on its own account for each piece and keeps that list under its own rules.

Resend, for email

Resend gets your email address and the text of the receipt. The receipt names the recipient's first name, city and state, and your tracking link. No email we send holds your message text.

Neon, the database host

Neon holds everything in the next section.

Railway and Cloudflare

Railway runs the service. Cloudflare serves the domain.

We never contact the postal service ourselves. Click2Mail checks your addresses against postal records, and Click2Mail reports the scans we show you.

What we store, and for how long

The database keeps this for every piece:

• the message text, and the sign-off and the sender name when a piece carries them
• your email address
• your drawn signature, as an image
• the recipient's full address, and your return address
• the result of the address check, which holds both the form you typed and the corrected postal form
• the price, the payment status and the Stripe session id
• the job ids from the mail house
• the USPS tracking number, its scans, and the raw reply behind them
• the visitor id and its one word
• the complete print file of the piece

A second table records how far you got while writing: the visitor id, its one word, which of the four steps you reached, and when.

Nothing in the service deletes any of this. There is no retention period, no purge, no expiry and no scheduled clean-up. It stays until a person removes it by hand.

You can ask us to remove your data. Write to hello@cellpostal.com. The owner reads the request and acts on it by hand.

Your tracking link

Every purchase gets a link at cellpostal.com/l/ and a random reference. The reference is a random identifier of the kind nobody can guess.

The page shows the status, the price, the job ids from the mail house and the USPS tracking number. It shows no message text, no addresses and no signature.

The page can redraw your piece, but only from the storage in the browser you wrote it in. The server never sends the artwork back.

There is no login. Anybody holding the link sees what the link shows. If you forward it, you share that.

Your choices

• To clear what your browser keeps, clear the site data for cellpostal.com in your browser settings.
• To ask what we hold about you, or to ask us to remove it, write to hello@cellpostal.com.
• We answer these by hand. There is no self-service button for it.
• A piece you have paid for is already at the mail house and cannot be stopped. The terms page explains that rule.

Children

Cellpostal is for adults. You must be 18 or older to buy, and nothing in the service checks anybody's age.

If a child gave us data, write to hello@cellpostal.com. We remove it by hand.

Changes to this policy

We can change this policy. The effective date at the top changes with it. We run no mailing list for changes, so read this page when you want the current version.

Contact

• Email: hello@cellpostal.com
• 250 High Street LLC, United States
• The rules of sale are on the terms page.