๐Ÿ”

Privacy Policy

Your anonymity is the foundation of Closur. Here's exactly what we collect, why, and how you stay in control.

Effective: April 16, 2026 ยท Last updated: April 16, 2026

โœ“ GDPR Compliantโœ“ CCPA Compliantโœ“ COPPA Compliant

TL;DR Summary

  • โœ“We collect your email, anonymous username, and the content you create.
  • โœ“We never sell your data or use it for advertising.
  • โœ“You can export or delete all your data from Settings at any time.
  • โœ“We use minimal cookies โ€” only what's needed to run the platform.
  • โœ“Users under 18 are not permitted to use Closur.
ยท

We collect only what we need to run Closur. Here's exactly what that means:

Account Information

  • โ—†Email address (used for login and notifications only)
  • โ—†Anonymous username (chosen by you โ€” not your real name)
  • โ—†Hashed password (we never store your password in plain text)
  • โ—†Account creation date

Content You Create

  • โ—†Letters you write and post
  • โ—†Whisper replies you leave on others' letters
  • โ—†Reactions (candles ๐Ÿ•ฏ๏ธ, hearts โค๏ธ) you give
  • โ—†Users you follow

Usage Data

  • โ—†Pages visited and features used (anonymized)
  • โ—†Device type and browser (for compatibility)
  • โ—†IP address (for security and abuse prevention โ€” not linked to your identity)
  • โ—†Session timestamps

What We Do NOT Collect

  • โ—†Your real name
  • โ—†Your location beyond country-level (for legal compliance)
  • โ—†Your phone number
  • โ—†Payment information (Closur is currently free)
  • โ—†Social media profiles

What "Anonymous" Means:

Your username is not linked to your real identity in our public-facing systems. However, your email and IP address are stored for account security and abuse prevention. We do not share your email or IP with other users, and we do not use them to identify you publicly. When we say "anonymized analytics," we mean data that has been aggregated and stripped of all personally identifiable information (email, IP, username) before analysis.

Your data is used only to operate and improve Closur. We do not sell it, rent it, or use it for advertising.

Authenticate your account

So only you can access your letters and settings.

Display your letters

To show your content in the feed and on your profile.

Send notifications

To alert you when someone reacts to or replies to your letter (if enabled).

Prevent abuse

To detect spam, harassment, and policy violations.

Improve the platform

Anonymized usage patterns help us understand what features matter most.

Legal compliance

To respond to lawful requests from authorities when required.

Our promise: We will never sell your data to third parties, use it for behavioral advertising, or share it with data brokers.

We use a minimal set of cookies to keep Closur working properly.

Essential Cookies

Required

Session tokens that keep you logged in. Without these, the platform cannot function.

Preference Cookies

Optional

Remember your filter settings, notification preferences, and UI choices.

Analytics Cookies

Optional

Anonymized usage data (via privacy-respecting analytics) to understand how features are used. No cross-site tracking.

We do not use third-party advertising cookies or tracking pixels. You can manage cookie preferences in your browser settings at any time.

You are in control of your data. Here's how long we keep things and how to remove them:

Active account dataKept while your account is active
Letters & repliesKept until you delete them or your account
Deleted lettersRemoved from public view immediately; purged from servers within 30 days
Deleted accountsAll personal data purged within 30 days of deletion
Server logs (IP, session)Automatically deleted after 90 days
Anonymized analyticsRetained indefinitely (no personal identifiers)

Your Rights (GDPR & CCPA)

  • โœ“Right to access โ€” request a copy of all data we hold about you
  • โœ“Right to rectification โ€” correct inaccurate data
  • โœ“Right to erasure โ€” delete your account and all associated data
  • โœ“Right to portability โ€” export your data in a machine-readable format
  • โœ“Right to object โ€” opt out of non-essential data processing

You can manage your data directly from the Settings page. No need to email us first.

๐Ÿ“ค

Export Your Data

Go to Settings โ†’ Privacy โ†’ Export Data. You'll receive a JSON file containing all your letters, replies, reactions, and account information within 24 hours.

Go to Settings
๐Ÿ—‘๏ธ

Delete Your Account

Go to Settings โ†’ Account โ†’ Delete Account. This action is permanent. All your letters, reactions, and personal data will be removed within 30 days.

Note: Anonymized aggregate statistics (e.g., total letters written on the platform) may persist as they contain no personal identifiers.

For requests that cannot be completed through Settings, email privacy@closur.app. We respond within 30 days as required by GDPR and CCPA.

We use a small number of trusted third-party services to operate Closur. Here's what they are and why:

Hosting & Infrastructure

Vercel / Railway

Purpose: Hosting the application and database

Data shared: Server logs, request metadata

Database

PostgreSQL (self-hosted or managed)

Purpose: Storing accounts, letters, and interactions

Data shared: All user and content data

Analytics

Privacy-respecting analytics (no cross-site tracking)

Purpose: Understanding how the platform is used

Data shared: Anonymized page views and feature usage

Email

Transactional email provider

Purpose: Sending account notifications and password resets

Data shared: Your email address

All third-party providers are contractually bound to process your data only as instructed by us and in compliance with applicable privacy laws. We do not share your data with social media platforms, advertisers, or data brokers.

Closur is available only to users 18 years of age or older. We do not knowingly collect personal information from anyone under 18.

This age requirement exists because Closur deals with complex emotional content including grief, loss, trauma, and relationship issues that require emotional maturity to process safely.

  • โ—†We do not knowingly allow users under 18 to create accounts.
  • โ—†If we discover that a user is under 18, we will immediately terminate their account and delete all associated data.
  • โ—†If you believe a user under 18 has created an account, please contact us at privacy@closur.app.
  • โ—†Parents or guardians who believe their minor child has provided us with personal information may request its immediate deletion.

We take privacy seriously. If you have questions, concerns, or requests related to your data, reach out to us:

General Privacy Questions

privacy@closur.app

Response time: Within 5 business days

Data Export / Deletion Requests

privacy@closur.app

Response time: Within 30 days (as required by GDPR/CCPA)

COPPA Concerns (Children's Data)

privacy@closur.app

Response time: Within 48 hours

Legal / Law Enforcement

legal@closur.app

Response time: Per applicable legal requirements

If you are located in the European Union and believe we have not adequately addressed your privacy concern, you have the right to lodge a complaint with your local data protection authority.