Privacy Policy
Last updated 2 October 2026
This explains what we collect, why, how long we keep it, and what you can ask us to do with it.
The Dove Letter is a trading name of THE DOVE LETTER, LLC. Contact us about anything in this policy at thedoveletter@gmail.com.
What we collect
From you, when you order
- Your email address.
- Your name, as you sign the letter.
- The recipient's name and postal address.
- The words of your letter, including any lines you edit.
- A note you may add for us about the order, which we use only to fulfil it and never print on the letter.
We do not ask for your age or date of birth. Our Terms of Sale require you to be at least 13, and you accept those terms when you check out.
From you, if you ask for a discount
- Your email address.
- If you choose to add it, the month and day of your birthday. This is optional, and the discount does not depend on it. We do not collect the year, so we never know your age.
The discount code and the email it was issued to are also kept in your own browser for up to 14 days, so the code can be filled in for you at checkout. That copy stays on your device.
Payment
Payment is handled by Stripe. Your card number never reaches our servers. Stripe tells us only that a payment succeeded, plus the last four digits and card brand for our records.
Automatically
- Basic technical data your browser sends, such as IP address and browser type.
- Which pages you visit and when you start checkout or buy, through the Meta Pixel. See “Advertising and the Meta Pixel” below.
- If you arrive through a creator's link, a small cookie remembers their code for 30 days so their discount is applied at checkout. It holds the code and nothing else.
Why we use it
- To print, seal and post your letter.
- To email you a receipt and tell you when your letter has been posted.
- To send you a birthday email, if you chose to give us your birthday.
- To prevent the same discount being used twice.
- To detect fraud and misuse.
- To meet our tax and legal obligations.
- To measure our advertising and show our ads to people likely to be interested, unless you opt out.
About the person who receives your letter
The person you write to did not give us their details. You did. We take that seriously.
- We delete the recipient's postal address once the letter has been posted. We keep their first name only, so that reordering is easier.
- Anyone can ask us never to send them another letter. Email thedoveletter@gmail.com and we will add them to a suppression list. We keep that record in a scrambled form that lets us block a match without storing a readable address.
- If someone who received a letter asks us what we hold about them, or asks us to delete it, we will answer.
How long we keep things
| What | How long |
|---|---|
| Recipient postal address | Deleted after the letter is posted |
| Recipient first name | Kept with the order |
| The words of your letter | Kept, separated from your personal details |
| Your email address | Kept while you are a customer and to manage discounts |
| Birthday month and day | Kept until you ask us to remove it |
| Order and payment records | Kept as long as tax and accounting law requires |
| Suppression list entries | Kept indefinitely, so the block keeps working |
| Meta Pixel cookies in your browser (_fbp, _fbc) | Set by Meta, up to 90 days |
| Your choice to stop ad tracking (dove-no-ads cookie) | Up to 400 days in your browser, renewed each time you visit, or until you change it |
Who we share with
We do not sell your personal information for money. We share it with the companies that help us run the business, and with Meta for advertising:
- Stripe — payments.
- Supabase — our database.
- Vercel — hosting.
- Resend — receipts and notifications.
- USPS — postal delivery.
- Meta — measuring and showing our ads, unless you opt out. See the next section.
We may also disclose information if the law requires it, or to protect someone's safety.
Advertising and the Meta Pixel
THE DOVE LETTER, LLC uses the Meta Pixel on this site and the Meta Conversions API on our server. We use them to measure how well our ads work, and to show our ads to people who are likely to be interested in them.
They collect:
- The pages you visit on this site.
- Checkout actions: when you start checkout, and when you complete a purchase and for how much.
- Contact details from your purchase, in hashed form: your email, phone number, name and location (city, state, ZIP code and country). Hashing turns each detail into a scrambled code before it leaves us, so Meta can match it to an account without being sent the detail itself.
- Your browser's IP address and type, and identifiers that Meta keeps in cookies on this site.
We do not send Meta the name or address of the person who receives your letter, or the words of your letter.
Meta may use this information under its own data policy: facebook.com/privacy/policy.
How to opt out. On our Your privacy choices page, use the switch to stop ad tracking. After that the Pixel does not load in your browser, and a purchase made from it is not sent to Meta. The switch applies to the browser you use it in. A Global Privacy Control signal from your browser has the same effect. You can also choose how Meta uses your information for ads in Meta's ad settings: facebook.com/adpreferences.
Some state privacy laws treat sharing information with an advertising partner in this way as a “sale” or “sharing” of personal information, or as “targeted advertising”. We do not sell your information for money, and you can opt out at any time as described above.
Marketing emails
If you provide your email address when purchasing from The Dove Letter, we may use it to send occasional promotional emails about The Dove Letter, subject to applicable law. We do not send these often.
Every promotional email carries an unsubscribe link, and your order receipt carries one too. Clicking it takes you off the list immediately, with no sign-in. Unsubscribing does not stop receipts or notices about a letter you have ordered, because those are about your order rather than about us.
Your choices
Depending on where you live, you may have the right to ask us for a copy of what we hold about you, to correct it, to delete it, to opt out of targeted advertising, and not to be discriminated against for asking.
To opt out of targeted advertising, use the switch on our Your privacy choices page. For everything else, use the request form on the same page, or email thedoveletter@gmail.com. We will send you a link to confirm it was you, then respond within 45 days, usually much sooner. You do not need to be a customer.
Global Privacy Control. We honour Global Privacy Control signals as an opt out of targeted advertising: when your browser sends one, the Meta Pixel does not load and your purchase is not sent to Meta. We do not respond to Do Not Track signals, which have no agreed meaning.
Marketing emails. Every marketing email has an unsubscribe link. Order receipts and letter notifications are not marketing and are sent regardless.
Children
This site is not directed at children under 13 and we do not knowingly collect personal information from them. This is why, when we offer to note your birthday, we ask only for the month and day and never the year.
If we learn we have collected information from a child under 13, we will delete it and refund any order. If you believe a child has given us information, email thedoveletter@gmail.com.
Security
We use encryption in transit, restricted access to our database, and a payment processor that keeps card data away from our systems entirely. No system is perfectly secure, and we cannot guarantee absolute security.
Where we operate
We sell only within the United States and our systems are in the United States.
Changes
We may update this policy. The date at the top shows when it last changed. If we make a significant change we will say so on the site.