privacy

last updated 2026-09-29 · review with lawyer

what we collect

the message you write, the first name you address it to, and the color you pick. these are public by design and are written to the ethereum blockchain, where they cannot be removed.

your email, if you give one, to send a receipt and a link to your block. a hashed copy of your IP address, kept to stop abuse. neither is public and neither is written on-chain.

payments

payments are handled by stripe. we never see or store your card number. stripe’s privacy policy applies to the payment itself.

what we don’t do

no accounts, no tracking pixels, no advertising, no selling of data. the only analytics are counts of four events (started writing, paid, sealed, shared) with no personal data attached.

third parties

cloudflare (hosting, bot protection), stripe (payments), an AI classifier that reads each message once before it is sealed, and an email provider for receipts.

your rights

you can ask us to delete your email and IP hash at any time at hello@unsentmuseum.com. the message itself cannot be deleted by anyone once sealed; that is the point of the wall, and you agree to it before paying.