Privacy Policy
Last updated: October 8, 2026
Who we are
The Birth Letter is operated by MB “Violetinis rytas“, Lithuania (company code 307055066), the controller of your personal information. Contact: help@thebirthletter.com.
What we collect
- Your account: first name, email address and a securely hashed password.
- What you enter for a letter: the name you were given at birth, date, time and place of birth, the question you ask and any short context you add. For a Two-Person Letter or a gift, the other person’s first name and birth details.
- Your photo – only if you choose to add one: see the Biometric Information Policy.
- Order details from our payment processors (ThriveCart and Stripe): order number, products, amount, and your billing country, state and ZIP code. We never see or store your full card number. We use the location only to decide whether the photo option can be offered to you, and for support.
- Technical details: IP address (kept with your photo consent record, and in hashed form to prevent abuse of the free first chapter), browser type, and cookies (see below).
Please don’t include health information in your question. If what you write reveals your health, your sex life, your beliefs or anything similar, you give us your explicit consent to use it only to write your letter, never for advertising. You can withdraw that consent at any time by deleting the letter or writing to us.
How we use it
- To write your letters, deliver them to your account and by email, and create their audio version.
- To run your account, answer support requests and handle refunds.
- For safety: before a letter is written, your question is checked for signs that you may be in danger right now. If we find them, we don’t write the letter, we show you where to get help, and we don’t keep the question. For other difficult themes, your letter is written with extra care.
- To send service emails (your letter is ready, your login details).
- To send marketing emails: after you ask for a free first chapter, a short series about your letter over about a month; after an order, a few letters about what else you can ask. Every marketing email has a one-click unsubscribe.
- To measure our advertising (see “Advertising and your choices“).
Service providers that write your letter
Letters, the reading of your expression and the safety check are processed by Anthropic; the audio version and text polishing by OpenAI. They process your details only to produce your letter. Under their API terms they do not use this data to train their models, and they delete it within 30 days, except where they must keep it longer to enforce their usage policies or to comply with the law.
Who else receives your information
Only service providers that help us run The Birth Letter: our hosting provider, the providers above, ThriveCart and Stripe (payments and order records), our email provider, and Meta for advertising measurement. We do not sell your personal information.
Advertising and your choices
When you visit, ask for a free chapter or buy, we may tell Meta (Facebook and Instagram) that a page was viewed, a free chapter was requested or an order was placed, with the order value, a hashed (scrambled) email address, first and last name, state and ZIP code, your IP address, browser and Meta cookie identifiers, so we can measure our ads. Our own measurement tool, on go.thebirthletter.com, records which ad and page brought you, your IP address and device type, and whether you then asked for a free chapter or bought; that record stays with us. We never send your question, birth details, letter or photo. Under some US state laws this counts as “sharing” for advertising. You can opt out at any time with the “Your privacy choices” link at the bottom of every page or by emailing help@thebirthletter.com. We treat a Global Privacy Control signal from your browser as an opt-out.
Cookies
Essential cookies keep you logged in and protect the site. Measurement cookies (Meta Pixel and our own click tracking) tell us which ad brought you here. You can opt out of measurement as described above. On the checkout, ThriveCart and Stripe set the cookies they need to process your payment securely.
How long we keep it
- Your account and letters: until you delete them. You can delete a letter in your account, or ask us to delete your account.
- Your photo: deleted after your expression is described, and in any case within 24 hours of upload.
- Free first chapter without an order: deleted after 12 months, or sooner if you ask.
- Order records: as long as needed for accounting and refunds. ThriveCart and Stripe keep their own records under their own policies.
Your rights
You can ask to access, correct or delete your personal information, and to stop marketing emails. Residents of certain US states have additional rights, such as the right to know what we collect, to delete it, to correct it, to opt out of sharing for advertising, and to appeal our decision. Email help@thebirthletter.com. We answer within 30 days and never treat you differently for using your rights.
Legal bases and your rights in the EU and the UK
Because we are based in Lithuania, the EU General Data Protection Regulation applies to your information wherever you live. We use your information to perform our contract with you (writing and delivering your letters, your account, payments and refunds); with your consent (your photo, the sensitive details you choose to write, and marketing emails where the law requires consent); for our legitimate interests (keeping the service safe, preventing abuse of the free chapter, and measuring our advertising, which you can object to at any time); and to meet legal obligations (accounting records).
You have the right to access, correct, delete, restrict or receive a copy of your information, to object to its use, and to withdraw your consent at any time without affecting what was done before. Email help@thebirthletter.com. You can also complain to the Lithuanian State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, vdai.lrv.lt) or to the data protection authority where you live.
Security
We use encrypted connections (HTTPS), store passwords only as secure hashes and limit access to personal information to what is needed to run the service.
Children
The Birth Letter is not for anyone under 18, and we don’t knowingly collect information from children.
International transfers
We are based in the European Union and some of our providers process data in the United States. For these transfers we rely on the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses, as offered by those providers.
Changes
We may update this policy. The date at the top shows the latest version.