Your postcard, your information.

Photos and artwork

We store your photo and its illustrated version on Cloudflare. Anyone who has an image’s link can view it, so avoid uploading confidential photos.

What OpenAI receives

Every photo goes to OpenAI twice: once for an automated check that it’s safe to print, and once to an image generation model that paints the illustrated style. That happens whether or not you end up sending the illustration, and whether you add the photo here yourself or ask an assistant like ChatGPT or Claude to start a postcard for you. Your note and the recipient’s name go through the same safety check. OpenAI explains how it handles this data in its API data controls.

Notes and addresses

We store your note and the recipient’s name and mailing address with the order. Address searches use Google Maps to suggest places.

Printing and mailing

Our fulfillment partner receives the front you chose, an image of the card’s back with your note on it, and the recipient’s name and address. The return address we give them is ours; we don’t ask for yours. The postcard has no envelope, so its picture, note and address can be read while it travels through the mail. The QR code on the back links to Paper Plane Post; it doesn’t open your order.

Your confirmation link

Anyone who has it can open the order’s details, including the note and address, so share it with care.

Featuring your artwork

If you send the illustrated style, a checkbox after checkout lets Paper Plane Post feature that artwork in its own posts. It starts unchecked, and covers the artwork only, never your note or the recipient’s address.

Payments

You pay on Stripe’s hosted checkout. Your card number is entered there, not on Paper Plane Post. We send Stripe an order reference, not your photo, note or the recipient’s address, and store payment status to know when to print and mail your postcard.

Cookies and browser checks

A cookie connects your browser to your postcards for up to one year. Cloudflare Turnstile checks browser requests to limit automated abuse. Only that browser can edit or pay for a postcard you’ve started, so clearing cookies or switching browsers means starting it again.

Storage

A postcard you start but don’t pay for is deleted, along with its photo and artwork, once it has gone untouched for 7 days. A photo that an AI assistant sends us to start a postcard is deleted 7 days after it arrives.

Photos, artwork and order records for postcards you’ve paid for are retained; there is currently no self-service deletion option. Image responses allow browser and network caching for up to one year, so a deleted image can still be shown from a cache during that time.

Service providers

Their handling of information is described in the privacy policies for OpenAI, Cloudflare, Google and Stripe.