# Sealtrove, full text > Guests scan a QR code and write a letter on their phone, with no account. Every letter is sealed on the server and the capsule opens on the date you choose. Every public page of https://sealtrove.com, as Markdown, in sitemap order. Built from the exported pages at build time. The short index is https://sealtrove.com/llms.txt. --- # Sealed guest letters for weddings and showers, Sealtrove URL: https://sealtrove.com/ Last reviewed: 2026-10-28 > Guests scan a QR code and write a letter on their phone, with no account. Every letter is sealed on the server and the capsule opens on the date you choose. ## Letters from every guest, sealed until the date you choose Guests scan your QR code and write on their own phones. Each letter is sealed the moment it is sent, and the whole capsule opens on your anniversary, or any day you pick. One year in. We hope the kitchen still smells of that cardamom bread, and that you still dance in it when nobody is looking. Get the photo album out tonight. From the cousins at table 6 Sealed 12 Jun 2027 at 21:14. Opened 12 Jun 2028. A sample letter, as it looks on the keepsake page on the open date. ### Three steps 1. **Start a capsule.** Name it, give the event date, and choose when it opens: the 1st, 5th or 10th anniversary, or a date of your own. You sign in with a passkey, so there is no password and no email to give. 2. **Share the QR code.** Print the sign for a table, or send the link. Guests write on their phones with no account, and each letter is sealed the moment they send it. You see a count, never the words. 3. **Open it together.** At 09:00 on the open date the capsule becomes a keepsake page, one letter to a card, ready to read, print and download. Sealed means the server will not show a letter to anyone, the host included, before the date. Each capsule holds 50 letters. The details, including the dates, the seal and what is stored, are on [how Sealtrove works](https://sealtrove.com/how-it-works/) and the [privacy page](https://sealtrove.com/privacy/). The [FAQ](https://sealtrove.com/faq/) covers partners, long seals and printing. --- # How a sealed letter capsule works, Sealtrove URL: https://sealtrove.com/how-it-works/ Last reviewed: 2026-10-28 > The rules in the order you meet them: the capsule, its dates and time zone, guests writing, the seal, the open date, printing, limits and deletion. ## How a sealed letter capsule works A host starts one capsule for an event. Guests write letters on their phones, each sealed on the server as it is sent, and the capsule opens on the date the host chose. The rules below are the ones the server enforces, in the order you meet them. Last updated 28 October 2026 ### The rules, in the order you meet them 1. **Starting a capsule.** You give it a name of up to 60 characters, the kind of event and the event date, and choose when it opens. The name cannot hold an email address, a web address or 7 digits in a row, so a capsule never carries anyone's contact details, and a baby shower capsule never needs the baby's name. 2. **Signing in.** You make an account with a passkey: your phone or computer keeps a key behind your fingerprint, face or screen lock, and the server keeps only the public half. There is no password and no username. You also get a recovery code, shown once. Up to 10 passkeys, so a partner can add one on their own phone. 3. **The dates.** Every date belongs to the capsule's time zone. Guests can write until 23:59 on the last day for letters: 7 days after the event unless you change it, and at most 90. The capsule opens at 09:00 on the open date, at least a day after the last day for letters and at most 10 years after the event (21 for a baby shower, so a child can open it at 18). An anniversary of 29 February falls on 28 February in a year without one. The server's clock decides, never a phone's. 4. **Changing the dates.** Before the first letter arrives, the open date can move either way and the time zone can change. After it, the open date can only move later, because guests were told a date, and the time zone stays. Once letters have stopped, the last day for letters is fixed, so a capsule never takes letters again. Once the capsule opens, every date is fixed. Every date change is shown to guests on their page, with the day it was made. 5. **Guests writing.** A guest scans the QR code or opens the link, writes who the letter is from (up to 40 characters, no email address, web address or phone number) and a letter of up to 3,000 characters, in any language. You can add a question of up to 140 characters for them. What they type stays on their phone until the server confirms the letter, so a lost signal loses nothing, and pressing Send twice still makes one letter. 6. **The seal.** Sealed means the server will not show a letter to anyone, the host included, before the date. Before the open date, every page and every download, the account export included, shows only how many letters there are. A guest cannot read or change a letter after sending it, their own included. 7. **How many letters.** Each capsule holds 50 letters, and you can have 2 capsules waiting to open at one time. When two guests send the last place at the same moment, one is sealed and the other is told the capsule is full. A capsule takes at most 300 letters an hour, which a whole wedding on one venue Wi-Fi stays under. 8. **Replacing the link.** If the guest link reaches someone it should not, replace it. The old QR code and link stop at once and tell anyone who opens them to ask you for the new one. The new link tells guests the day it was replaced; letters already sent stay sealed, and replacing the link never lets anyone read them early. 9. **The open date.** At 09:00 the capsule becomes a keepsake page: one letter to a card, in the order they were sealed. You can hide a letter, print the page, and download the letters. If you added and confirmed an email address, you get one email that day with a link to sign in; the letters are never in the email. Either way, your dashboard shows Open now. 10. **Printing.** The A5 QR sign and the calendar file are free. Table cards (4 to a sheet) and the envelope pack (one letter a page, folded into a DL envelope) are on for every capsule. Every PDF is made on your device; the letters are drawn in their own script, and emoji are drawn by your browser, so no letter prints as empty boxes. 11. **Deleting.** A deleted capsule stops taking letters at once and can be restored for 7 days; after that it and its letters are deleted for good. Deleting your account does the same for everything, after you type DELETE. 12. **When the server is busy.** The site runs on a hosting allowance with daily limits. When one is reached the page says "Saving is paused for now" and what you typed stays on your device to send later. ### Worked example A couple marries on 12 June 2027 in London and starts a capsule that opens on their 1st anniversary. Guests can write until 23:59 on 19 June 2027, London time, which is 22:59:59 UTC because of summer time. A table card QR at the reception collects 46 letters that evening; the couple's dashboard shows "46 letters sealed" and nothing more. A week later an aunt abroad writes from the link in a message. On 12 June 2028 at 09:00 London time (08:00 UTC) the capsule opens on both their phones, because the second passkey is on the other phone. They hide one letter, print the page, and download the letters to keep. We plan to keep your capsule until it opens. No website can promise 18 years, so a long seal carries that risk. After it opens, download the letters and keep your own copy. ### What it is not - Not locked with a key you hold: the seal is the server refusing to show a letter before the date. - Not a chat or a guest book: guests cannot see each other's letters, and nobody can reply. - Not a photo album: letters are text only for now. - Sealtrove is not affiliated with any venue, planner, stationery brand or time-capsule service. --- # Questions about sealed guest letters, Sealtrove URL: https://sealtrove.com/faq/ Last reviewed: 2026-10-28 > Can the host read early, can guests edit, what if the site is gone, partners, how many letters, open dates and times, printing and deletion. ## Questions about sealed guest letters The seal, guests, dates, printing and your data, answered plainly. The rules themselves are on [how it works](https://sealtrove.com/how-it-works/). ### Frequently asked questions **Can the host read letters early?** No. Sealed means the server will not show a letter to anyone, the host included, before the date. Before the open date the server sends the host a count and nothing else: no From line, no words, not in the dashboard, not in a download. **Can a guest read or edit a letter after sending?** No. A letter is sealed the moment it is sent, and no page or download shows it to a guest, the one who wrote it included. If a guest wants to add something, they can write another letter. **What happens if the website is gone in 18 years?** We plan to keep your capsule until it opens. No website can promise 18 years, so a long seal carries that risk. After it opens, download the letters and keep your own copy. **Do guests need an account?** No. A guest scans the QR code or opens the link, types who the letter is from and the letter, and presses Send. They never sign in and never receive email. **Can both partners open it?** Yes. While signed in, add a second passkey on your partner's phone from Settings. The passkeys section there explains the steps. **How many letters fit?** Each capsule holds 50 letters. When a capsule is full, the write page tells the next guest so, and keeps what they typed on their phone. Each letter is up to 3,000 characters. **Can I change the open date?** Yes, until the capsule opens. Before the first letter arrives it can move earlier or later. Once a letter is sealed it can only move later, because guests were told a date. The time zone can change only before the first letter. Every change is shown to guests on their page with the day it was made, and once letters have stopped the last day for letters cannot be moved to take more. **What time does it open?** At 09:00 on the open date in the capsule's time zone, which you choose when you start it. Letters are taken until 23:59 on the last day for letters, in the same zone. A capsule can stay sealed for up to 10 years after the event, or 21 for a baby shower. **Can I add photos?** Not yet. Letters are text only. **How do I print table cards?** Open the capsule, choose A4 or US Letter, and press Download table cards. Each sheet has 4 cards with your question and the QR code; cut along the dashed lines. **Is it encrypted?** No. Sealed means the server will not show a letter before the date. Letters travel over HTTPS and the guest link's secret is kept only in scrambled form, but this site stores the letters as they were typed, not locked with a key you hold. **How do I delete everything?** On the account page, press Delete my account and type DELETE. Guest links stop at once and you are signed out everywhere. Sign in within 7 days to cancel; after that the account, its capsules and their letters are deleted for good. One capsule can be deleted from its own page the same way. **What if I lose my phone?** If your passkey is synced by your passkey manager, it is on your other devices already. Otherwise sign in on another device you added, or use your recovery code on the recovery page to add a new passkey. **Who is behind the site?** Sealtrove is an independent web tool. Sealtrove is not affiliated with any venue, planner, stationery brand or time-capsule service. --- # About the sealed guest letter capsule, Sealtrove URL: https://sealtrove.com/about/ Last reviewed: 2026-10-28 > What Sealtrove is: one capsule of guest letters for an event, sealed on the server until the date the host chooses, and what it stores and why. ## About Sealtrove A small site for one keepsake from a big day: letters from every guest, kept sealed until a date the hosts choose. ### Why it exists Couples, shower hosts and birthday hosts often want guests to write something to be opened later. The usual answer is a box of paper cards that gets lost in a move, or a kit of envelopes passed round a table that only half the room reaches. Sealtrove puts one QR code on the table instead. Every guest writes on their own phone, from the reception or from the other side of the world a week later, and all the letters wait together in one capsule. ### How it is built The pages are static files. A small server takes each letter and keeps it in one database on Cloudflare, and it refuses to show any letter to anyone, the hosts included, before the open date. Sealed means the server will not show a letter to anyone, the host included, before the date. The hosts sign in with a passkey, so the site never holds a password, and guests need no account at all. The guest link is a long random secret, and the database keeps only a scrambled form of it. It asks for as little as it can. A host gives no name and no email address to sign up; an email address is optional and is used only to say a capsule has opened. A guest types who the letter is from and the letter. There is no advertising, no tracking script and no data shared for marketing. PDFs are made on your own device. ### Who it is for A couple who want letters to open on their first anniversary. Friends throwing a baby shower who want letters a child can open at 18. A family marking a big birthday, a retirement or a leaving party. Anyone who wants one combined keepsake from a whole event rather than a pile of separate envelopes. ### What it is not It is not locked with a key you hold, and it makes no promise beyond what a website can keep: the letters should be downloaded once they open. It is not a chat and not a guest book; guests cannot read each other's letters. It does not send email to guests, ever. Sealtrove is not affiliated with any venue, planner, stationery brand or time-capsule service. ### Install it On a phone it can sit on your home screen like an app. On an iPhone or iPad, open the Share menu in Safari and choose Add to Home Screen. On other browsers, use Install in the menu. ### Contact Questions and problem reports go to socialreminderinfo@gmail.com. A report that names the page and what you pressed is the quickest to fix. --- # Privacy: what is stored, where and for how long, Sealtrove URL: https://sealtrove.com/privacy/ Last reviewed: 2026-10-28 > Exactly what Sealtrove stores on its server, where it is kept, for how long, what never leaves your device, and how to delete all of it. ## Privacy: what is stored, where and for how long Exactly what Sealtrove stores on its server, where it is kept, for how long, what never leaves your device, and how to delete all of it. Last updated 28 October 2026 ### Where it is kept Sealtrove stores capsule details and letters on Cloudflare D1: one database that belongs to this site. Cloudflare chooses where the database lives; the region is not pinned, so it may be outside your country. The pages themselves are static files served by Cloudflare Pages. ### What is stored for an owner - A random account id, the account name you chose for your passkey manager (or Sealtrove owner), and when the account was made. - For each passkey: its public key, its id, a signature counter, the name you gave it and when it was added and last used. Never a fingerprint, a face or any biometric data: those stay on your device. - A scrambled form (SHA-256) of your recovery code. The code itself is shown to you once and not kept. - For each signed in device: a scrambled form of its session id, and when it was made, last used and when it expires (90 days after the last use, counted a day at a time). - Your email address, only if you add one, with when you confirmed it, and for 24 hours a scrambled form of the confirmation link. It is used only to say a capsule has opened. It is the one place an email address is ever stored. - Each capsule: its name, the kind of event, the event date, the last day for letters, the open date, the time zone, the question for guests, the number of letters, whether it was upgraded, whether the opening email went, and when it was made and changed. If you move the open date or the last day for letters, or replace the guest link, the day you did it and the date it replaced are kept, and guests see them on their page. - For each capsule's guest link: a scrambled form (SHA-256) of its secret, plus a sealed copy that only this server can open with its own secret key, so you can see the QR code again. A replaced link keeps only its scrambled form, so it can say it was replaced. - A record of each email sent, kept 30 days, to keep within a daily number. ### What is stored for a guest - Each letter: who it is from as the guest typed it, the letter, and when it was sealed. No account, no email address, no phone number. - A random key the guest's browser makes for each letter, so pressing Send twice stores one letter. - Nothing that ties a letter to a device or a network address. ### Limits on how fast requests come To stop a capsule being flooded, the server counts letters per capsule and per network address in hourly buckets. The address is stored only as a keyed scramble that cannot be turned back into the address, and each bucket is deleted after 2 hours. Network addresses are never written to logs. ### How long it is kept - Your account, capsules and letters: until you delete them. A letter you hide on the keepsake page stays until you delete the capsule. - A deleted capsule and its letters: 7 days, while it can be restored, then deleted for good. - A deleted account and everything in it: 7 days, while you can sign in and cancel, then deleted for good. - Sessions: until 90 days after the last visit on that device, or until you sign out. - Passkey sign in requests: 5 minutes. Rate limit buckets: 2 hours. Email records: 30 days. ### What stays on your device A letter or a capsule form you are typing is kept in your browser's local storage under keys beginning with `guestletters` until the server confirms it, so a dropped connection loses nothing. The secret part of a guest link sits after the # sign, which browsers do not send to any server in the address. PDFs and calendar files are made on your device. ### How to export and delete it On the Settings page, Download everything gives one file with your account and capsules. Letters are in it only for capsules that have opened; before that the file lists each capsule's dates and how many letters it holds, never their words. On the keepsake page you can download one capsule's letters. Delete my account removes everything after the 7 days above, once you type DELETE; a single capsule can be deleted from its own page. Requests by email go to socialreminderinfo@gmail.com. ### Cookies One cookie, and only for owners who sign in: a session cookie that keeps you signed in. It cannot be read by page scripts and is never sent to another site. Guests get no cookie. ### Page counts Visits may be counted by Cloudflare's own page counter, which sets no cookie and records that a page was opened, never what you typed. There is no other analytics. ### Payments No paid plan is offered at present; if one is added, this page will describe it. ### Email Only owners can receive email, only at an address they added and confirmed, and only to say a capsule has opened, plus the one confirmation email. Guests are never emailed. Emails carry no tracking images and never contain a letter. ### Typeface Headings are set in Instrument Serif by the Instrument Serif Project Authors, under the SIL Open Font License 1.1, served from this site. The licence is at [/fonts/OFL.txt](https://sealtrove.com/fonts/OFL.txt). PDFs embed parts of Noto Sans, Noto Sans Arabic and Noto Sans Hebrew, under the same licence. ### Changes and contact If this policy changes in a way that affects what is stored, the change will appear on this page. Questions go to socialreminderinfo@gmail.com. --- # Terms of use for the guest letter capsules, Sealtrove URL: https://sealtrove.com/terms/ Last reviewed: 2026-10-28 > The terms that apply when you use Sealtrove: what a capsule can be relied on for, the letters, acceptable use and support. ## Terms of use The terms that apply when you use Sealtrove: what a capsule can be relied on for, the letters, acceptable use and support. Last updated 28 October 2026 ### What this is Sealtrove keeps letters that guests write for a host, sealed until the open date the host chose. Anyone who has a capsule's guest link can write a letter until the host replaces the link. Sealed means the server will not show a letter to anyone, the host included, before the date. ### Names used Passkeys, browsers and passkey managers are named descriptively. Sealtrove is not affiliated with any venue, planner, stationery brand or time-capsule service. ### How long a capsule is kept A capsule is kept until you delete it, before and after it opens. No website can promise to be here in 18 years, so a long seal carries that risk: once a capsule opens, download the letters and keep your own copy. ### Payments No paid plan is offered at present; if one is added, this page will describe it. ### Your content A guest owns what they write and gives it to the host, who can read it from the open date, hide it, print it and download it. A guest cannot read, change or take back a letter once it is sent. A host can download everything and delete the account at any time from the Settings page; the privacy page says exactly what is stored and for how long. ### Acceptable use Use a capsule for your own event's letters. Do not write anything unlawful, hateful or someone else's private details, do not name children, do not try to guess links, and do not send requests at a rate that degrades the site for other people. Nobody reads letters before they open, so a host who finds a letter that breaks these terms can hide it, and may report it to socialreminderinfo@gmail.com. ### Warranty and liability The site is provided as it is, without warranty of any kind, and runs within free hosting limits that can make it busy for a while. To the extent the law allows, Sealtrove is not liable for any loss arising from its use, including a letter that was not saved, a capsule that was not kept, or a link that was shared further than intended. ### Contact Questions and problem reports go to socialreminderinfo@gmail.com.