Privacy Policy
Last updated 31 August 2026.
The plain-language version of what we do and refuse to do is on the privacy promise page. This is the formal account of the data itself.
Who we are
Letter Kit is a service of STACHOLD GROUP LLC ("we", "us"), operated from PO Box 548, Athens, TX 75751, United States. That company is the data controller for the account data described below. For the subscriber lists our customers keep here, the customer is the controller and we are the processor acting on their instructions.
This website
These marketing pages set no cookies. They do count page views, using Cloudflare Web Analytics, and it is worth being precise about what that does and does not involve.
It stores nothing on your device — no cookie, no local storage, no identifier of any kind — and it does not build a fingerprint from your IP address or browser. Because it keeps no persistent identifier, it cannot follow you between visits or between sites; a "visit" is inferred from the page you arrived from. What we see is how many people read a page and roughly where they came from, never who they were.
This applies to these marketing pages only. It is not in the emails anyone sends through Letter Kit, and it is not in the archive pages your readers land on. More on that line and why it is where it is.
Our host, Cloudflare, also records ordinary web server logs, including IP addresses, for security and reliability.
The contact form is operated by Submit Kit. What you type is emailed to us and is not stored afterwards. Cloudflare Turnstile is used to distinguish people from bots on that form; it is a challenge, not a tracker, and sets no advertising cookie.
If you have an account
| Your name and email address | To identify you, sign you in, and contact you about the service |
|---|---|
| Your postal address | Required by US law in the footer of commercial email you send |
| Your issues and drafts | To store, send and publish them at your direction |
| Your credit and payment records | To run the prepaid balance and meet accounting obligations |
Payment is handled by Stripe. Card details go to Stripe and never to us; we keep a record that a payment happened and what credit it bought.
If you subscribe to a newsletter sent from here
We hold your email address, when and where you subscribed, when you confirmed, and the delivery outcome of each message sent to you — accepted, bounced, reported as spam, or unsubscribed.
- There is no tracking pixel in the emails, so we do not know whether you opened one.
- Links are not rewritten, so we do not know what you clicked.
- We do not build a profile of you across the newsletters you receive here.
- We never email you on our own behalf, and never sell, rent or share your address.
The consent record exists so that the writer, or we, can answer a question about whether you agreed to receive their newsletter.
The writer of the newsletter decides what is in it and who is on their list. To be removed, use the unsubscribe link in any issue — it works immediately and needs no account. If you would rather ask us, get in touch and we will pass it on and act on it.
Who else sees this data
- Amazon Web Services (SES) — sends the email and reports what became of it
- Stripe — processes payments
- Cloudflare — serves this website and provides the Turnstile challenge
- DigitalOcean — hosts the application and its database
- Submit Kit — delivers this site's contact form
Each is used for that purpose alone. We do not sell personal data, and we do not share it for advertising. We may disclose data where the law requires it.
Where it is held
Data is stored on servers in the United States. If you are in the United Kingdom or the European Economic Area, your data is transferred there under the standard contractual clauses our providers offer.
How long we keep it
- Account data — while the account is open, then deleted when it closes
- Subscriber records — until the writer deletes them or closes the account
- Unsubscribe and suppression records — kept after removal, because forgetting them entirely is how someone gets emailed again by mistake
- Payment records — as long as tax and accounting law requires
- Contact form messages — as email in our inbox; not stored by the form
Your rights
Depending on where you live, you may have the right to see the data we hold about you, to correct it, to have it deleted, to object to how it is used, and to receive a copy in a portable format. Ask and we will do it. We will not charge you or make it difficult.
If you are in the UK or EEA you may also complain to your data protection authority. We would rather you told us first so we can fix it.
Security
Traffic is encrypted in transit, passwords are stored hashed, and access to production systems is limited to those who need it. No system is perfect; if we discover a breach affecting your data we will tell you promptly and describe what happened.
Changes
If this policy changes materially we will say so by email before the change takes effect. The date at the top always reflects the current version.