Privacy
Last updated 14 October 2026
Deadman lets you write letters for the people you choose and have them sent if you stop checking in, or on dates you pick. To do that we have to store your letters and the details of the people they're for. This page explains exactly what we keep, why, who else sees it, and how to remove it.
The short version
- We store what you put in: your email, your letters, files and videos, and the names and contact details of your people.
- Your letters are stored securely but not end-to-end encrypted. Don't put passwords or other secrets in them.
- No ads, no tracking, no selling of data. One cookie, to keep you logged in.
- You can download everything, or delete your account and everything in it, from Settings at any time.
What we store, and why
About you
- Your email address, to log you in (we email you a link; there are no passwords) and to send reminders.
- Your name, if you give it, so your people know who a letter is from.
- Your reminder channels: any extra places you choose to get reminders (another email, a chat app, push notifications on a device).
- Your switches and check-ins: the timing you set, and when and how you checked in.
- An activity log of what the system did for you (reminders, check-ins, messages sent, your changes), so you can see it. Entries are deleted after two years.
What you write
- Letters, personal notes, files and videos, and who each one is for and when it should be sent.
About your people
- Names, relationships and contact details (email addresses, phone numbers, chat details) of the people you add, and which of them are backups or trusted people.
- Whether, and when, each person opened their private page after letters were sent to them.
You are giving us details of other people. Please only add people you have a good reason to write to. We don't contact them unless a letter is sent to them, they're asked as your backup, or you named them as trusted and missed a check-in.
Who else handles your data
We use a few companies to run the service. They process data only to provide their part of it:
- Cloudflare hosts the website and stores the database and your files.
- Resend sends our emails (login links, reminders, and letters sent by email).
- The services you choose for reminders or for reaching people, such as WhatsApp (Meta), SMS (Twilio), Telegram, ntfy, Discord, Slack or a webhook. Messages through these are short notices with a private link, never the letters themselves.
- Google, Apple, Mozilla or Microsoft, if you turn on push notifications: they deliver the notification to your device. Its content is encrypted so only your device can read it.
We don't sell your data, use it for advertising, or share it with anyone else unless the law requires it.
Who can read your letters
- Each person can read only the letters addressed to them (or to everyone), and only once they've been sent.
- A backup you choose can read the letters of the person they cover, once they've been asked to step in.
- Letters are not end-to-end encrypted, so the people who run the service could technically read them. We don't, except where needed to fix a problem you ask us about, or where the law requires it.
- Anyone with a person's private link can open their page, so people should keep their links to themselves.
Cookies
One cookie keeps you logged in. Your light or dark choice is saved in your browser. There are no analytics or advertising cookies.
How long we keep it
- Everything is kept until you delete it, or delete your account.
- The activity log is kept for two years. Login and check-in links expire within days and are then deleted.
- After a switch fires, its letters stay available to your people until you (or someone with access to your account) delete the switch or the account.
- Deleted data can remain in our hosting provider's backups for up to 30 days before it's gone for good.
Your choices and rights
- See and download everything: Settings → Download everything.
- Correct anything, at any time, in the app.
- Delete your account and everything in it: Settings → Delete account. Nothing is sent to anyone when you do.
- If you're one of someone's people and want your details removed, contact us and we'll help.
Depending on where you live, data protection law (such as India's Digital Personal Data Protection Act, 2023, or the GDPR) may give you further rights. Contact us to use them.
Security
Data is sent over HTTPS and stored with our hosting provider. Login and check-in links work once and expire, and are stored only as secure hashes. Uploaded files can never run as web pages on our site. No system is perfectly secure; please keep your email account safe, because it's the key to your account.
Children
The service is for adults. Don't use it if you're under 18.
Changes
If we change this policy in a way that matters, we'll tell you by email before the change takes effect.
Contact
Questions or requests: support@hithshi.com.