Privacy Policy

Version 2026-08-21 · MIRACLE IN ME campaign by SOME BY MI

Not yet reviewed by legal counsel. This document was written from what the system actually does — what is stored, for how long, and where it goes — so that it is technically accurate. A legal review is still required before the campaign opens to the public.

What we keep

When you send a letter, this is all that is stored:

A name to call you
Used to greet you in the email. A nickname is fine.
Email address
The only way your letter can reach you. Not used for anything else.
Your letter
Stored exactly as you wrote it, until delivery day.
Photo (optional)
Resized and stripped of location data (EXIF) on your own device, before it is uploaded. What reaches our server already has no location data in it.
Connection fingerprint
Your IP address is not stored. What is stored is a salted hash of it — enough to show that consent came from some connection at some moment, not enough to track you.
Where you came from
Which link brought you to this page, for example Instagram.

If you let your letter be shown

  • Only the text of the letter appears — no name, no email, no photo.
  • Every letter is reviewed by a person before it goes up.
  • You can withdraw it at any time through the link in our emails.

How long we keep it

  • Letter, name, and email — until your letter is delivered on 30 August 2027, then kept only as far as the delivery record requires.
  • Photo — permanently deleted from storage 30 days after your letter is successfully delivered. The deletion runs automatically, not on request.
  • Unverified email addresses — as a rule these never enter the sending queue. One exception exists: a technical fault stopped our first email from reaching a group of early sign-ups, and their letters were confirmed by our team instead, so that the letters they had already written would not be lost.

Who else touches your data

We use outside services for two things, and each receives only what it genuinely needs:

  • Google (Gmail) — email delivery. Your name, email address, and the text of your letter pass through it on delivery day.
  • Our hosting provider — where this campaign’s database and photo storage run. Photos stay on our own server; they are not handed to any third-party storage service.
  • Cloudflare — sits in front of the site to keep it available. It sees the traffic to this site, not the contents of your letter.

Your data is not sold, not traded, and not used to target advertising.

Visit measurement

Nothing is recorded before you answer the cookie notice — not even the fact that you opened this page. If you accept, we record visits and form steps with a random identifier your own browser creates, which is not shared with anyone. If you decline, nothing is sent at all.

Your rights

  • Ask for a copy of the data we hold about you.
  • Ask for your data to be deleted or anonymised, at any time, without a reason.
  • Withdraw permission to show your letter on the home page.
  • Stop receiving email from us — including your own letter.

For any of these, reply to any email from us, or use the address below. Deletion requests are carried out by our team and logged, so there is a record.

Contacting us

Questions about your personal data can be sent to the MIRACLE IN ME campaign team at the email address given in the confirmation email we send you.