Privacy
What we keep, why, and for how long. Written for GDPR and KVKK.
What we store
- Your e-mail address (and a backup address if you give one), your time zone, and the country of your payment. These are how we reach you in ten years and how sales are counted by country.
- Your Later: text, photos and video, encrypted with a key unique to it. We never read it; see our promise.
- Public brick content: the name, picture and link you chose to show.
- Order records from Paddle (amount, date, transaction id). Paddle handles card data; we never see it.
- Audit logs: every decryption, moderation decision and payment event, with time and actor.
What we do not do
We do not sell data, train anything on your Later, or show it to anyone. Analytics are cookieless unless you accept the optional advertising cookies in the banner.
Processors
Supabase (database, EU or US region as configured), Cloudflare (network and encrypted object storage), Resend (e-mail), Paddle (payments), and, for private media, a content-safety scanning provider that checks for illegal material only.
Retention
Laters are kept until they open and for as long as your account exists. Deleting your account destroys them at once. Order and audit records are kept for the legal minimum.
Your rights
Export, correction and deletion are available from My Laters. For anything else, write to [email protected].
Children
Laterwall is for people 13 and older. Pictures of children on the wall follow the wall policy.