AdaLetterbox Privacy Policy
Last updated: 30 September 2026
AdaLetterbox is a private delayed-message delivery project operated by Iain Hammond. This policy explains how AdaLetterbox accesses and uses Google user data and other information associated with the service.
Google Drive data
AdaLetterbox uses read-only Google Drive access to locate and read letter documents deliberately placed in its configured Drive location. The contents and metadata required to process those documents are used only to import letters into AdaLetterbox.
AdaLetterbox does not modify or delete Google Drive files.
Gmail data
AdaLetterbox uses Gmail send-only access to send a letter when it becomes due. It does not read, search, modify, or delete Gmail messages or mailbox contents.
When a letter is delivered, its message content is provided to Gmail for transmission as an email. The resulting email and associated metadata may be retained by Google, the recipient's email provider, and the recipient according to their respective policies and settings.
Local storage
Imported letter content is stored locally by AdaLetterbox in sealed form until intentional delivery. The local application uses operating-system protection tied to its Windows user account to protect sealed message content and locally stored Google authorization credentials.
Local records may also contain operational metadata required by the service, such as letter identifiers, creation and delivery times, delivery status, provenance, and source-document identifiers.
Sharing and use of data
Google user data accessed by AdaLetterbox is used only to provide the delayed-message collection and delivery functions described above. AdaLetterbox does not sell Google user data or use it for advertising.
Data is disclosed to Google and the configured email recipient only as necessary to perform the requested Google Drive and Gmail operations, except where disclosure may be required by law.
Website logs
This website does not use application analytics, advertising trackers, or cookies added by AdaLetterbox. The web server maintains ordinary access and error logs for operation and security. These logs may include information such as IP address, requested URL, date and time, HTTP status, referrer, and user-agent information.
Data retention and access
AdaLetterbox is privately operated. Local application data and authorization credentials remain under the operator's control. Google account access can be revoked through the relevant Google account settings. Copies of delivered email may remain in email systems according to the policies and settings of those systems.
Contact
Questions about AdaLetterbox or this privacy policy may be directed to the operator through the contact information provided with the application's Google OAuth configuration.