Privacy Policy
Last updated: February 1, 2026
Introduction
The Magic Letter Box ("we," "our," or "us") is committed to protecting your privacy and the privacy of your children. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services at themagicletterbox.com.
Information We Collect
Information You Provide
When you use our service, we may collect:
- Account Information: Email address and password when you create an account
- Child Information: First names, ages, interests, achievements, and other details you choose to share to personalize letters
- Student Information (Classroom Edition): Student first names, optional nicknames, ages, and notes that teachers provide to personalize letters for their classroom
- Classroom Information: Classroom names, school names, grade levels, and mascot details for teachers using the Classroom Edition
- Payment Information: Processed securely through Stripe; we do not store credit card numbers
- Letter Content: The personalized letters you create through our service
Automatically Collected Information
We may automatically collect:
- Device type and browser information
- IP address and general location (country/region)
- Usage data (pages visited, features used)
- Cookies and similar tracking technologies
How We Use Your Information
We use the information we collect to:
- Create personalized letters based on the details you provide
- Manage your account and provide customer support
- Process payments and subscriptions
- Improve our service and develop new features
- Send service-related communications (account updates, password resets)
- With your consent, send promotional emails about new features or offers
Children's and Students' Privacy
Our service is designed for parents and guardians to create letters for their children, and for teachers to create letters for their students. We do not knowingly collect personal information directly from children under 13. All child-related and student-related information is provided by parents, guardians, or teachers.
We comply with the Children's Online Privacy Protection Act (COPPA). Parents and guardians have full control over the child information they provide and can request deletion of this information at any time by contacting us.
Classroom Edition - Teacher Data
When teachers use the Classroom Edition to create letters for students:
- Minimal Data Collection: We only collect student first names and optional details (nickname, age, interests) that teachers choose to provide for letter personalization
- No Sensitive Information: We do not collect student last names, addresses, Social Security numbers, academic records, or other sensitive personally identifiable information
- Teacher Control: Teachers have full control over what student information they enter and can delete student records at any time
- Data Isolation: Student data is only accessible to the teacher who created it and our administrative systems
- Educational Purpose: Student information is used solely for generating personalized letters and is not used for marketing, advertising, or any other purpose
Teachers using the Classroom Edition represent that they have appropriate authority to provide student information for the purpose of creating personalized letters, consistent with their school's policies and applicable privacy laws.
Data Storage and Security
Your data is stored securely using industry-standard encryption. We use Supabase for database storage and Stripe for payment processing, both of which maintain strong security practices and compliance certifications.
Letter history for Premium subscribers is retained as long as your account is active. Free tier users' letters are not stored after PDF generation.
Data Sharing
We do not sell your personal information. We may share information with:
- Service Providers: Companies that help us operate (payment processing, hosting, AI services)
- Legal Requirements: When required by law or to protect our rights
Cookies
We use cookies to:
- Keep you logged in to your account
- Remember your preferences
- Understand how you use our service
You can control cookies through your browser settings, though some features may not work properly without them.
Your Rights
You have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your account and associated data
- Opt out of promotional communications
- Export your data in a portable format
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date.
Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us at: