Privacy Policy

Overview

NotNowCapsule ("we," "our," or "the Service") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our time-capsule messaging service.

Our core privacy principle: Your capsule contents are encrypted and we cannot read them. Only you (with your edit password) and your designated recipient (with the unlock key) can access the content.

Information We Collect

Account Information

When you register, we collect:

• Email address (for account access and notifications)
• Name (displayed to recipients)
• Password (stored as a secure hash, never in plain text)

Capsule Metadata

For each capsule, we store:

• Recipient name (as you provide it)
• Capsule title (optional)
• Unlock date and event conditions
• Content type (text, image, etc.)
• Creation and modification timestamps
• Capsule status (sealed, unlocked, revoked)

Encrypted Content

Your capsule content is encrypted using AES-256-GCM encryption before storage. We store:

• Encrypted capsule content (we cannot decrypt this)
• Encrypted unlock key (encrypted with your edit password)
• Cryptographic salts and initialization vectors
• Hash of the unlock key (for verification only)

Usage Information

We may collect:

• Unlock attempts (timestamp, success/failure)
• Recovery requests
• Basic analytics (page views, feature usage)

How We Use Your Information

We use your information to:

• Provide and maintain the Service
• Authenticate your account access
• Process capsule creation, editing, and unlocking
• Send important service notifications
• Respond to support requests
• Improve the Service based on usage patterns
• Detect and prevent fraud or abuse

What We Cannot Access

Due to our encryption design, we cannot:

• Read the contents of your capsules
• Recover lost unlock keys
• Reset forgotten edit passwords
• Decrypt capsules on behalf of anyone

This is by design. Your privacy is protected cryptographically, not just by policy.

Data Sharing

We do not sell your personal information. We may share information only in these cases:

• With your consent: When you explicitly authorize sharing
• Service providers: With trusted partners who help operate the Service (e.g., hosting, email delivery), bound by confidentiality agreements
• Legal requirements: When required by law, court order, or to protect rights and safety
• Business transfers: In connection with a merger, acquisition, or sale of assets (users would be notified)

Note: Even if compelled by legal process, we cannot provide decrypted capsule contents because we do not have the keys to decrypt them.

Data Retention

We retain your data as follows:

• Active capsules: Retained until unlocked, revoked, or you delete them
• Unlocked capsules: Retained for 30 days after unlock, then deleted
• Account data: Retained while your account is active
• Deleted accounts: Data removed within 30 days of account deletion

Your Rights

You have the right to:

• Access: View your account information and capsule metadata
• Export: Download your capsule data (encrypted)
• Edit: Update your account information and capsule contents
• Delete: Revoke capsules and delete your account
• Portability: Export your data in a standard format

To exercise these rights, use the dashboard or contact us at privacy@notnowcapsule.com.

Security Measures

We implement multiple layers of security:

• AES-256-GCM encryption for all capsule contents
• PBKDF2 key derivation with 100,000 iterations
• bcrypt password hashing for account passwords
• HTTPS encryption for all data in transit
• Regular security audits and updates
• Encrypted database backups

Cookies and Tracking

We use minimal cookies:

• Authentication: Session cookies to keep you logged in
• Preferences: To remember your settings

We do not use third-party advertising trackers or sell data to advertisers.

Children's Privacy

The Service is not intended for users under 13 years of age. We do not knowingly collect information from children under 13. If you believe a child has provided us with personal information, please contact us.

International Users

Your data may be processed in countries other than your own. By using the Service, you consent to the transfer of information to countries that may have different data protection laws.

Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or through the Service. The "Last updated" date at the top indicates when the policy was last revised.

Contact Us

For questions or concerns about this Privacy Policy or our data practices:

• Email: privacy@notnowcapsule.com
• For data deletion requests: privacy@notnowcapsule.com