Privacy Policy

1. Who runs the service

Legacy Drawer is run by CJO Solutions LLC, a Wyoming limited liability company ("we", "us"). For anything about your privacy, write to cjo-solutions@protonmail.com or use the contact page.

2. What we collect

Only what the service needs to work:

• Account details: your name and your email address.
• Titles and relationships: the titles of the messages and documents in your drawer, who you have shared them with, who has shared with you, and who you message.
• Timing: when you signed up, when items unlock, when you answer a check-in, when messages are sent and read, and when you sign in.
• Encrypted content: the messages, documents, photos, files and conversations you store. We hold these only in encrypted form, which we cannot read (see the next section).
• Devices: for conversations kept only on your devices, a record of each browser you have registered, with the name you gave it.
• Things you write to us: messages sent through the Feedback/Questions button in the app or the contact form on this site are stored readable, because we need to read them to answer.
• Referral codes: if you arrived through an affiliate's link, the code of that link is recorded with your account when you sign up, so the affiliate can be credited. It says nothing about you beyond that.

3. What we cannot see

This is the main promise of the product, so we say it plainly. Everything you put in your drawer, and everything you write in a conversation, is encrypted on your own device before it is sent to us, with keys that only you hold. Your password never leaves your device.

• We cannot read your messages, open your documents, or see your conversations. Neither can anyone who breaks into our servers.
• We cannot reset a forgotten password. If you have turned on password recovery, your recovery code can open your keys; we cannot.
• What we can see is listed in section 2: names, addresses, titles, who is connected to whom, and when things happen.

4. How we use it

• To run the service: releasing items on the date you chose or when you stop answering check-ins, delivering messages, and telling the people you chose when something is ready for them.
• To send the emails described under Settings → Notifications in the app, and the account security emails that cannot be switched off (email verification, check-in requests, password and email-address changes).
• To answer you when you write to us, and to credit affiliates for sign-ups that came through their links.
• To keep the service safe: rate limits, and records of sign-ins and sessions.

We do not sell your data, we do not show advertising, and we do not use analytics or tracking services in the app or on this site.

5. Who else processes it

We run Legacy Drawer on two providers, both in the United States:

• Amazon Web Services (region us-east-1, Northern Virginia): hosting, encrypted file storage, email delivery, and content delivery.
• DigitalOcean (region nyc3, New York): the database that holds account details, titles, relationships and timing.

These providers store what we send them; they do not hold your keys either, so they cannot read your content. If we move the database to another provider, we will update this section and the change log.

6. Cookies and browser storage

• We set no advertising or analytics cookies, in the app or on this site.
• The app keeps a sign-in token and your profile in your browser's local storage so links from our emails find you signed in. Your private keys are kept in a form scripts cannot copy out, and are cleared after 20 minutes without activity (you can change this in Settings) and when you sign out.
• Conversations you have set to be kept only on your devices are stored, encrypted, in your browser's own database; they are removed when you remove that device in Settings.
• If you arrived through an affiliate's link, the browser remembers that link's code for 30 days so you can still be credited to them if you sign up later. It is removed when you create an account or after 30 days.

7. Emails

We send emails for verification, invitations, check-in requests, unlocks, new messages and account changes. Every optional email carries an unsubscribe link, and Settings → Notifications lets you choose what reaches you. Check-in requests and account security emails cannot be switched off, because missing a check-in is what releases an item.

8. How long we keep things

• Items and messages stay until you delete them, or until you delete your account.
• Sign-in sessions last 12 hours. Email verification links last 24 hours. Password reset links last 30 minutes. Invitations last 14 days.
• After you change your email address, the old address is kept for 14 days so the change can be undone from that address.
• Photos and files in conversations kept only on your devices are held on the server for up to 30 days so each of your devices can fetch them, then deleted.
• Messages you send us through Feedback/Questions or the contact form are kept so we can answer and keep track of what was asked.
• Deleting your account removes your account, your items and their content, your shares, your conversations and your devices. What you sent to other people through Direct Messages is removed from their side too. Feedback you sent us is kept with your name and email so our records stay complete.

9. Your rights

• See and correct: your name, email address and settings are shown in the app and can be changed there.
• Delete: Settings → Delete account removes everything described above, after you re-enter your password. There is no waiting period and no way back.
• Take your content with you: open any item to download it, decrypted, at any time.
• Ask us anything: write to cjo-solutions@protonmail.com. We will reply from a human.

10. Children

Legacy Drawer is not directed at people under 18, and we do not knowingly hold an account for anyone younger. If you believe a child has created an account, write to us and we will remove it.

11. Changes to this policy

When this policy changes we update the effective date at the top and add a line to the change log below. If a change matters to how your data is handled, we also tell you by email before it takes effect.

Change log

• 19 September 2026 · First version.