Version 2026-11-04
Privacy Policy
The short version: I collect as little as I can, I never sell it, and you can ask me to delete it at any time.
What I collect
When you use Kind Keys
- Your first name, last name and email address, which you type in.
- A record of your consent: the date and time you agreed, which versions of these terms you agreed to, and whether you opted in to blog emails.
- What you asked for (for example "Comfort me · Homesick") and how many notes you've requested.
- A scrambled (hashed) version of your IP address, used only to stop abuse and enforce daily limits. I don't keep your raw IP address.
When you contact me or subscribe to the blog
- Your email address, and anything you choose to write in the contact form.
Everywhere on the site
- Basic, anonymous page statistics (if turned on), which don't use cookies or identify you.
- Your light/dark mode choice and a few similar settings are stored in your own browser, not sent to me.
Why I collect it
- To confirm it's really you: Kind Keys emails you a one-time code before it writes anything.
- To keep the service fair and affordable: limits of 2 notes per person per day and a daily total.
- To keep a record of who agreed to these terms and when.
- To send you new blog posts, but only if you ticked the box asking for them. You can unsubscribe from any blog email in one click.
I don't sell, rent or trade your information, and I don't use it for advertising.
Who helps run this
A few services process data on my behalf, only to provide the parts of the site described here:
- Amazon Web Services: stores Kind Keys records (Amazon DynamoDB), in the United States.
- Anthropic: its Claude models write the Kind Keys notes. Only your choices (like "Write me a poem · Hope") are sent, never your name, email or IP address.
- Cloudflare Turnstile: a quick check that you're a person, not a bot.
- Vercel: hosts the website.
- Resend: sends the one-time code emails, contact-form messages and blog emails.
How long I keep it
- Kind Keys records (name, email, consent records): up to 7 years from your last visit, then they're deleted automatically, unless you ask me to delete them sooner.
- One-time codes: deleted after 10 minutes or as soon as they're used.
- Limit counters: deleted within a few days.
- Blog subscription: until you unsubscribe.
Your choices and rights
You can ask me to see, correct or delete your information, or to stop sending you blog emails, at any time. Use the contact page and include the email address you used. I'll reply within 30 days. Depending on where you live (for example the EU, UK or California), you may have extra rights under local law, and I'll honour them.
Age
Kind Keys is for people 16 or older. If you believe someone younger has given me their information, contact me and I'll delete it.
Security
Information travels over encrypted connections (HTTPS) and is stored with access limited to me. One-time codes are stored only in scrambled form. No system is perfectly secure, but I take reasonable care to protect what you share.
Changes
If I change this policy, I'll update the date and version at the top. If a change is significant, Kind Keys will ask you to agree again.
Contact
Questions or requests: use the contact page.