Privacy Policy

Last updated: April 2026

1. Controller

Thurn is operated from Switzerland. Contact: [email protected]

Letter content: The text you type or upload, used solely to generate and mail your letter.
Recipient address: Required to address and deliver the letter.
Sender address: Optional. Printed on the letter if provided.
Email address: Optional. Used only for order confirmation and shipping notification.
Payment data: Processed by Stripe. We do not store credit card numbers.
IP address: Used for rate limiting and fraud prevention. Not stored long-term.

We process your data to fulfill your letter order. Legal basis: performance of a contract (Swiss nDSG Art. 6).

Stripe Inc. — Payment processing (US/EU)
A&O Fischer GmbH & Co. KG (onlinebrief24.de) — Letter printing and mailing (Germany)
Hetzner Online GmbH — Server hosting and object storage (Germany)
Cloudflare Inc. — Website delivery and DDoS protection (US/EU)

Letter PDFs: Deleted within 14 days after dispatch.
Order metadata (address, status, timestamps): Retained for 90 days for support, then deleted.
Payment records: Retained as required by tax law (up to 10 years for accounting).
Audit logs: Retained for 90 days.

Under Swiss data protection law (nDSG), you have the right to access, correct, or delete your personal data. Contact [email protected].

We use only essential cookies (no tracking, no analytics in v1). No consent banner is required.

We may update this policy. Material changes will be noted on this page.