Private developmental testing
Privacy & safety
Wingpost is operated by Chris Vale. This page explains how information is used during our private, friends-only test and how to contact us about your privacy.
Information we keep
You can sign in with ChatGPT, Google, or email. Depending on the method, we receive an account identifier, email address, and available name or profile information. Wingpost stores the profile details you provide, including name, country or region, bio and photo, plus friendships, invitations, drafts, letters, delivery and read status, preferences, membership details, and tester feedback. We use this information to operate your account, connect friends, deliver letters and service emails, provide support, and improve reliability.
Who can see letters
Letters appear only in the sender’s and recipient’s accounts. They are stored by Wingpost and are not end-to-end encrypted, so the Site owner, authorized editors, and hosting providers may access stored data when necessary.
Your controls
You can remove or block friends, download a copy of your Wingpost data, and delete your Wingpost profile and associated app data from Settings. Delivered letters remain with the other person, labeled “Deleted account,” with their content unchanged. Undelivered letters are canceled; your inbox and drafts are removed. Wingpost does not sell tester information or use letter contents for advertising. Owner directory access and membership changes are recorded in an administrative audit log; it does not contain letter text.
Diagnostics and browser storage
Wingpost records connection check-ins and startup, network, application, and file-loading errors to find and fix problems. Reports include a timestamp, browser/device information, page and asset paths, an error message, and a hashed session identifier. These reports are not a video or screen recording. Hosting request logs may also contain IP addresses, requested URLs, browser information, and response status.
We use cookies and browser storage for sign-in, private-test access, preferences, diagnostic sessions, and safe updates. Blocking this storage may prevent parts of Wingpost from working. Wingpost does not sell tester information or use letter contents for advertising.
Home Screen app and phone alerts
Installing Wingpost is optional. The app saves its public offline page and icon on your device; it does not save letters, account responses, or private photos in its offline cache. If you enable phone alerts, we store your device’s push subscription and encryption keys to send arrival notifications through Apple, Google, Mozilla, or your browser’s notification provider. Notifications contain no letter text, subject, or photos. You can turn alerts off for this device in Settings. Signing out through Wingpost removes this device’s subscription; deleting your account removes all its subscriptions. Delivery attempt records are kept for up to seven days to diagnose failures and avoid duplicate alerts.
Services that process information
OpenAI Sites and Cloudflare provide hosting and application storage. Supabase handles email and Google authentication; ChatGPT sign-in uses OpenAI. Resend processes service emails, including recipient addresses and notification information. Automated Wingpost notification emails do not include letter bodies. Support messages sent by email are also processed by our email providers. Each provider processes information needed for its role under its applicable terms and privacy practices.
Authorized operators and service providers may access stored information to operate the service, investigate problems or abuse, or comply with applicable legal obligations. Information may be processed outside your country. Recipients can retain or copy letters they receive; Wingpost cannot remove copies they save outside the service.
Retention and deletion limits
App records remain while needed for your account and the service. Deleting your profile removes your drafts, friendships, preferences, membership record, and tester feedback; undelivered letters are canceled. Delivered letters remain in the other participant’s account with your account identity replaced by “Deleted account.” Text you wrote inside a letter is not rewritten, so it may still identify you. Profile-photo removal is attempted during deletion; contact support if it does not complete.
Account deletion also removes the matching Wingpost sign-in record held in Supabase. It does not delete your Google or ChatGPT account. If sign-in or photo cleanup fails, a pending deletion record is retained so cleanup can be retried before a new Wingpost profile is created. Contact support if deletion remains pending. Signing up again after deletion creates a new profile; it does not restore old letters or friendships. Administrative audit records, provider logs, previously sent emails, and backup copies are not all removed by this control, and we do not promise immediate erasure from those systems.
Diagnostic cleanup targets events older than 14 days during incoming diagnostic traffic; records can remain longer until cleanup runs. Separate provider logs and backups follow the provider’s configured retention. Contact us for questions about a specific record.
Testing safely
Only invite people you know. Keep the shared testing phrase within the test group, and do not use Wingpost for passwords, payment information, medical records, or anything requiring end-to-end encrypted communication. We are recruiting adults aged 18 or older for this beta test. Please do not invite minors into this test group.
To request access, correction, or deletion of your information, or report a privacy or safety concern, email support@wingpost.net. You can also use Settings → Testing & support. We may need to verify account ownership before acting on a request. Please do not email passwords or sign-in codes.