Privacy Policy

• —Your message goes on Bitcoin, where it's public and can't be removed. Your message itself may identify you or someone else, so choose your words with that in mind.
• —We don't put your email or the names on your certificate on Bitcoin or on public pages. Our service providers handle them for us, and anyone with your certificate's private link can see the names.
• —No cookies (except the payment form's own, once card payments open), no ad tracking, and we don't sell your information. Some frame links earn us a commission.

Foreverscribe isn't open for orders yet. While it isn't, the message check is switched off and we take no orders, so the only information we handle is what you send us by email, the sharing counts and server logs described below, and what stays in your own browser. The parts of this policy about checking messages, orders, payments and order emails describe how they'll work once ordering opens.

Before ordering opens, we'll name the company that runs Foreverscribe here. For privacy questions or requests: hello@foreverscribe.com.

Your message, the occasion you picked (such as "Anniversary"), the date and the transaction ID are public: on Bitcoin (the message), on your certificate's public page and in our public registry. Put together, these can identify a person even without a name.

Please don't write about anyone's health, religious beliefs or sexuality, yours included: our Terms don't allow it. To check a message, our server and our checking provider have to read it, including anything like that you send despite this rule; what we keep from a check is described below. Our check can miss things. Taking a certificate off our pages doesn't remove a message already on Bitcoin.

We can take a certificate out of our registry and pages on request. We can't remove anything from Bitcoin, from Bitcoin explorers, or from copies other people have made.

• —When you write a message: the draft you're editing is stored in your browser tab. When you ask for the safety check, your message and occasion are sent to our server and to our checking provider. The check shows you what to change; we don't keep that explanation. We keep only the result (approved or not) and a one-way fingerprint (a hash) of what was checked, not the words.
• —When you order: the message, occasion, the names on your certificate, your email address, what you paid, a payment reference, the times, the transaction details, and which version of our Terms you accepted.
• —Payment: Stripe handles your card details; we receive a payment reference and the amount.
• —Your ownership key: made in your browser and kept on your device; we never receive it. We receive and keep a public key made from it, a fingerprint of its post-quantum public key, and a fingerprint of its backup part, which are sealed into your engraving's transaction on Bitcoin. None of them identifies you.
• —Emails: we send emails about your order (a receipt and your certificate link, a note when it's in a block, and, only if needed, a note that it's slow), and your links again if you ask. We keep whether each email was sent. No marketing email.
• —"Lost your link?": a fingerprint of the email address entered, and the time.
• —Visit counts: for each day, how many times each page is seen, and how many visits go on to write a message, pass the safety check and pay, with where the visit came from (a campaign tag in the link, or the name of the site that linked here). Totals only: no IP address, no cookie, nothing that identifies you. Nothing is counted if your browser sends Do Not Track or Global Privacy Control, or if you turn counting off below.
• —Sharing: counts of when a certificate is shared or visited through a shared link, with no IP address and nothing that identifies you.
• —If you write to us: your email and what you send.
• —If you report an engraving: its FS ID, the reason you pick, anything you write, and your email if you give it. We don't keep your IP address with it.
• —If we stop taking orders from someone because an engraving of theirs broke our Terms: a fingerprint of the email address on that order, never the address itself.
• —Your IP address is used in memory to limit abuse (for example, too many requests) and is not saved by our app. Our hosting provider may keep standard technical logs.

We don't use cookies, ad trackers, tracking pixels or outside analytics services, and our pages don't load anything from other companies. We count visits ourselves, as totals (see "What we collect"). When card payments open, the checkout page will load Stripe's payment form, which uses its own cookies to prevent fraud.

We keep a few things in your browser for features you use; they're listed in the table below. Some are sent to us when you use them: your message when you check it or order, and your certificate's private link when you open it. Anyone who can use your browser can open the certificates saved in it. "Forget this device" removes everything in the table from this browser; it doesn't delete our records, your emails or anything on Bitcoin.

Global Privacy Control and Do Not Track: with either one on, your browser doesn't send us sharing counts. They don't switch off what's needed to run the site, check messages or take payments.

These providers handle information for us, each for its own task:

• —Amazon Web Services: hosting, our database, our server logs and sending our emails, in the United States.
• —Anthropic: runs the automated safety check on your message and occasion, through its API. Under its commercial terms it doesn't use this to train its models; it keeps API data for a limited time under its own retention policy.
• —Stripe: card payments, including its own fraud checks.
• —Squarespace (through Mailgun) and Google: deliver and store email sent to hello@foreverscribe.com.
• —mempool.space and Blockstream: carry our transactions to the Bitcoin network and report their progress. They see the public transaction, which includes your message; we don't send them your email, the names on your certificate or payment details.

If you follow a link to a frame on Amazon or to a Bitcoin explorer, that site sees your visit under its own policy.

We may also share information when the law requires it, to protect people from harm or fraud, with our professional advisers, or with a company that takes over running Foreverscribe, which would have to follow this policy.

• —Your message on Bitcoin: permanently. Nobody can delete it.
• —Your certificate page and registry entry: while we run the service, unless you ask us to take them down.
• —Your order, including the names and your email: while we keep your certificate available (so we can send your links again), and then as long as tax and accounting rules require. You can ask us to delete your email and names sooner; we then keep only what those rules require, or what we need while a payment dispute about that order is open.
• —Safety-check results for messages that were never ordered: 30 days. Results behind an order stay with the order.
• —"Lost your link?" fingerprints: 7 days.
• —Server logs: up to 1 year. Database backups: up to 30 days.
• —Emails you send us: as long as needed to help you, and longer if they're part of an order's records.
• —Reports about engravings: up to 3 years, as a record of what we were told and what we did.
• —Refused-order fingerprints: for as long as the refusal stands.

You can ask to see the personal information we hold about you, correct it, delete it, or take your certificate off our registry and pages. If someone engraved or entered information about you, you can ask us too.

Write to hello@foreverscribe.com. To protect your information, we confirm requests about an order by email to the address on that order. Having a certificate's private link lets you view the certificate, but not the buyer's email, payment details or other order records, and an FS ID alone isn't enough either. If the request is about information someone else entered about you, we'll explain how we can confirm it's you. We answer within 30 days, and if we can't do something, we'll say why. If you disagree, reply and ask us to look again; you can also contact your state attorney general.

Deleting information from our systems doesn't remove anything already on Bitcoin or copies others keep. Depending on where you live, you may have more rights under the law; this policy doesn't limit them.

We protect the information in our systems with encrypted connections, an encrypted database, limited and logged access, and by keeping the key that signs our Bitcoin transactions and the secret behind private links in Amazon's key services, outside our database. Bitcoin itself is public by design, and what's saved in your browser or downloaded is in your hands.

Foreverscribe isn't meant for children, and you must be 18 to order. Adults sometimes engrave something for a child: use a first name only, never a last name, school or place. Our check tries to catch those but can miss things, and a first name together with other details can still identify a child. If we learn we've collected information directly from a child under 13, we'll delete it.

When our practices change, we'll post the new policy here with its date. If a change affects how we use information we already have, we'll tell affected customers by email, and ask first where the law requires.