Privacy
Discovery Mailbox, Inc. ("Discovery Mailbox," "we," or "us") operates discoverymailbox.com and the subscription service Letters from Dr. Marlowe Finch. This policy describes what we collect, how we use it, and how you can delete it. We keep it short on purpose.
What we collect
- From the parent: name, email, billing address, shipping address.
- About the child: first name only. No last name, no birthdate, no email, no account.
- Payment information: handled entirely by Stripe. We never see or store card numbers.
- Basic usage logs: IP address and user-agent for the site itself, held 30 days, with personally identifying fields omitted from application logs.
How we use it
- To process the subscription, print the envelope, and mail the letter.
- To send a welcome email and periodic operational email about your subscription.
- To contact you from hello@discoverymailbox.com when you email support.
- To debug the site and the fulfillment pipeline.
We do not sell personal data. We do not share it with third parties except the processors that make the service work (Stripe for payments, our mail host, our shipping and print vendors).
Children's information
We collect only the child's first name and the shipping address the parent provides. That information is used solely to address and ship physical mail — it is never used to market, contact, or build a profile of the child. The data is encrypted at rest, transmitted over TLS, and excluded from application logs.
COPPA does not apply to Discovery Mailbox. The Children's Online Privacy Protection Act governs services that collect data from children under thirteen online. Our service is sold to the parent. The child never creates an account, never visits the site, and never interacts with us online. The child's name is fulfillment metadata — the same category as "ship to: Ada Thompson" on any package.
When a subscription is cancelled, the child's data is soft-deleted (no longer used for any purpose and removed from active lists). On written request to hello@discoverymailbox.com, we hard-delete the record entirely.
Payments
All payment processing is handled by Stripe. We never see or store card numbers, CVCs, or full expiration dates. Stripe's privacy practices govern payment data.
Cookies
We do not set cookies. There is no account or login on this site — subscription management happens through Stripe's billing portal via emailed links. No analytics cookies, no advertising cookies, no cross-site trackers. If we ever add analytics, we'll use a privacy-respecting provider and update this page.
Your rights
- You can delete your subscription and all associated data by emailing hello@discoverymailbox.com.
- You can request a copy of the data we hold about you at the same address.
- California residents: under the CCPA, you have the right to know, delete, and opt out of sale of your personal information. We do not sell personal information.
Questions
Email hello@discoverymailbox.com. A real person reads every message.