What hopepost knows about you.

No accounts, no profiles, no names, no email addresses, no raw IP addresses, no third-party cookies, no cross-site identifiers, no advertising identifiers, and no payment information. There is nothing on hopepost to sign up for, so there is nothing to log into and nothing to log out of.

Three things. First, the letter you submit, if you choose to write one — anonymously, with no link back to you. Second, a salted one-way hash of your IP address, used only to rate-limit submissions. The hash cannot be reversed back to your IP and is not joined to any other data. Third, Vercel's privacy-respecting aggregate analytics — page views and Core Web Vitals — with no cookies, no fingerprinting, and no per-visitor identifiers.

Letters you save with the Save button live in your browser's localStorage on your device. Nothing is sent to us when you save. Clearing your browser storage removes them. The /saved page reads them back the next time you visit on the same browser.

Hopepost is hosted on Vercel (USA / global edge). Letters are stored in a Neon Postgres database. Rate-limit hashes live in Upstash Redis. Email to hello@hopepost.org is forwarded by Cloudflare. Admin sign-in for the moderator uses Clerk — readers and writers are never touched by Clerk. Each of these vendors processes data on our behalf under their own published terms.

Pending letters: until they are reviewed (usually within a few days). Rejected letters: kept briefly so we can recognise repeat patterns and improve moderation, then deleted. Approved letters: kept indefinitely — they are the point of the project. IP hashes: auto-expire with the rate-limit window, typically minutes to hours.

Under the Australian Privacy Act 1988 (Cth) and analogous regimes (GDPR in the EU, CCPA in California, and others), you can ask what personal information we hold about you, ask us to correct it, or ask us to delete it. Because hopepost holds almost nothing tied to a person, there is usually nothing meaningful to action — but we will read every request and respond. Email hello@hopepost.org.

Hopepost is intended for people 16 and over. We do not collect age and have no way to verify it. If you are a parent or guardian and believe a younger person submitted a letter that you would like removed, contact us and we will remove it.

Material changes to this page get a new Updated date below. Wording fixes that do not change the substance do not. If we ever introduce something new that involves data (we do not plan to), we will say so prominently.