EverLinked
Privacy and your memories
What EverLinked stores
If you send a contact or help request, we store your email and optional note encrypted in our database so our team can respond. These requests are removed after 90 days by scheduled cleanup; retention in separate backups may differ. This does not create an account or subscribe you to marketing. EverLinked also stores account and recipient email addresses, capsule settings, contributor names and relationships, written messages, uploaded media, chosen opening dates, payment references, support requests and operational records. Stripe processes card payments; card details are not stored in the capsule database.
Who can open a message
Capsule owners can manage settings and see contribution metadata. Recipient access to sealed contents requires a recorded release and an authorized account. A private contribution-management link lets its contributor request a correction or withdraw that contribution. Protect that link like a password.
Service providers
Cloudflare hosts the application, database and private media storage. Stripe handles payments. Resend delivers account and notification emails. Operational access is restricted, but EverLinked does not claim end-to-end encryption against its operators.
On your device
Session storage holds unfinished form details and a private draft link. Where supported, IndexedDB keeps unsent files for recovery. Recovery copies expire after 24 hours and are cleaned up when the feature next runs, or after successful sealing. Browser storage may be cleared by your device; keep your own originals and avoid shared devices.
Your choices
A contributor can use their receipt link to withdraw a message. Signed-in users can manage optional email notifications and send privacy or account requests through Support. Released exports contain only messages the requesting recipient is allowed to open.
Privacy questions
Contact EverLinked to ask about access, retention or deletion of your information. Deletion from the active service does not immediately remove historical copies from separate backups. Keep independent originals of irreplaceable memories.