Privacy

Last updated 2026-10-20.

This site is for parents, guardians and teachers. It is not directed at children, and we ask that adults fill in the form.

Your child’s details

The details you type (first name, age, town, good deeds, wish, goal, pets and siblings) are used only to write this letter and its certificate, envelope and postcard.
Before anything is written, the details are checked by our blocklist and by Waffo’s content-safety service (Prompt Sift).
To write the letter, the details are sent to our AI provider fal.ai, which runs Claude Sonnet 4.5 (Anthropic). The postcard is painted by Nano Banana (Google Gemini 2.5 Flash Image) on fal.ai and receives only your child’s first name.
Nothing is shown publicly. There is no account and no gallery. We never ask for or accept photos.
Letters that are not unlocked are deleted after 3 days; unlocked packs after 30 days. To delete earlier, email us.
Each letter has a private link with a random token. Anyone with the link can open it, so keep it private.

To limit free use, we store a salted hash of your IP address for each letter, not the IP address itself.
We keep a log of content-safety decisions as required by our payment provider’s AI content rules; the checked text is removed from it after 30 days.
We count anonymous events (for example “letter written”) per day together with the kind of referring site, and visits from search and AI crawlers by user agent. These counts contain no personal data.
Payments are handled by Waffo, our Merchant of Record. We never see your card details. If you buy a multi-letter pass, we store a salted hash of your payment email so you can recover the pass.
No advertising cookies; we do not sell data.

Questions or deletion requests: hello@ailetterfromsanta.com