Sealed(privacy)

Privacy

last updated: august 21, 2026

Sealed is built on a simple idea: we ask for as little as possible, as late as possible, and your letters belong to the two of you.

This page says what we collect, when, and why — in plain words.

Who we are

Sealed (sealed.red) is operated by Sixtyfive Security Systems Ltd, registered at Chrysi Dimitriadi, 5, 3106 Limassol, Republic of Cyprus.

For the data described here, Sixtyfive Security Systems Ltd is the controller.

Questions, privacy requests, or complaints: letters@sealed.red.

What we collect, and when

When you tell us your chapters — the one-minute form — we collect your email, the chapter or chapters you choose, where you live, how long you have been in each chapter, age, gender, an optional matching or safety note, how you heard about us, and your timezone.

If you use Start a chapter, we also keep the chapter description you give us.

We may process your IP address and basic request information for security and rate limiting. Our own rate-limiting records expire after 24 hours. Hosting and infrastructure providers may keep limited technical logs under their own security and operational policies.

If a chapter is ready to open and you write your first letter, we collect the letter itself and any chapter-specific details we ask for. A human reads that application. We do not use an algorithm to decide whether your writing is “good enough”.

During a season, we store your letters or voice notes and the timestamps needed to deliver them.

Your correspondence is private to your pair. Our staff does not routinely read it. If your partner reports a letter, an authorised person may read the reported content and enough surrounding context to understand the report. Moderation access is logged.

At the finale, if you choose to finish your identity card, we collect the first name, age and city you want your partner to see. You may also add a way to contact you.

Before the finale, Sealed does not ask you for a profile name. Stripe may hold billing information separately, and anything you choose to put into a letter may of course become part of that correspondence.

Names are revealed only under the finale rules. Contact details are shared only if both people choose continue.

Payment is handled by Stripe. We do not receive or store your full card number. We receive the information needed to know whether a payment method is ready, whether a payment succeeded, and basic transaction information needed to run the service and keep financial records.

Sensitive things you choose to write

A real letter can contain things that privacy law treats as especially sensitive — for example information about health, religion, political beliefs, sexuality, or other deeply personal parts of your life.

We never ask you to include those things just for our sake.

If you are in the EEA, before you send your first letter we ask separately for your explicit consent to process any sensitive personal information that you choose to include, solely so we can store and deliver your correspondence and handle a report if one is made.

You can withdraw that consent at any time. If the information cannot reasonably be separated from your correspondence, withdrawing consent may mean that we have to delete the affected content or end your participation. Withdrawal does not make earlier lawful processing unlawful.

What we don't do

We may use limited automated processing where it is technically necessary to store and deliver content, protect the service, prevent abuse, or warn about things that should not be shared before the finale, such as contact details. It is not used to judge the meaning or quality of your letters.

A letter appears in the public archive only when both people explicitly approve that specific letter. It is published without names or contact details. Approval can be withdrawn later.

Why we're allowed to process this

For EEA users, the legal bases depend on what we are doing.

Finding a possible match and running your season: steps you ask us to take before entering a contract, and performance of the contract once you join a paid run.

Sensitive personal information you choose to include in correspondence: your explicit consent.

Revealing your finale card, sharing contact details, or publishing a letter in the public archive: your consent for that specific action.

Security, rate limiting, fraud prevention, and moderation following a report: our legitimate interests in keeping Sealed safe and usable.

Payment, accounting, tax, and legal records: performance of the contract and any legal obligations that apply to us.

Who we use to run Sealed

We use a small number of providers to operate the service:

These providers process only the data needed for their role. Stripe also processes some payment information for its own regulatory, fraud-prevention, and payment-network obligations under its own privacy terms.

Depending on the provider and our configuration, data may be processed outside the EEA. Where required, we rely on recognised transfer mechanisms such as Standard Contractual Clauses or an applicable adequacy decision.

How long we keep things

Chapter-interest data: for up to 12 months after your last activity, unless you ask us to delete it sooner.

Applications and first letters when you do not enter a season: for up to 12 months after your last activity, unless you ask us to delete them sooner.

Letters and voice notes from a season: while you keep your account and choose to keep your correspondence archive.

Our own rate-limiting records: 24 hours.

Moderation reports and moderation-access records: normally for up to 24 months after the case is closed. We may keep specific records longer when reasonably necessary for an active dispute, safety investigation, legal claim, or legal obligation.

Payment, tax, and accounting records: for as long as applicable law requires.

Deleting your account

You can delete your account yourself at sealed.red/account/delete, or write to letters@sealed.red.

Deleting your account removes the personal profile information we control and the letters and voice notes you authored, including the copies visible in your partner's Sealed archive.

Any public-archive copy of a letter you authored is removed too.

Your partner remains the owner of the letters they wrote.

Deletion is irreversible.

A small amount of information may be kept where we are legally required to keep it, or where it is reasonably necessary for an unresolved safety report, dispute, or legal claim. It is not kept for normal product use.

Your rights

Depending on where you live, you may have rights to:

Write to letters@sealed.red.

If you are in the EEA, you also have the right to complain to the data-protection authority where you live or work. Our lead supervisory authority is the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus.

Washington consumer health data

If you are a Washington resident and information you provide qualifies as consumer health data under Washington law, additional rights and disclosures may apply.

Those are described in our separate Washington Consumer Health Data Privacy Notice, which is linked from the Sealed homepage.

Age

Sealed is for adults only — 18 and over.

Changes

If this policy changes in a way that materially affects how we use data you already gave us, we'll tell you before the change takes effect.

One email, as usual.