Trust and security
How we keep things safe.
The promises we keep in every product we make, what this website does with your visit, and how to tell us about a security problem.
In every product
What we promise
No ads
There is no advertising in anything we make, and there never will be.
We never sell data
We do not sell, rent or trade what people store with us, or what we know about them.
Encrypted by default
In Gentle Handover, what you keep in your boxes, the text of your letters and plans, and your recordings are stored encrypted with AES-256-GCM, the encryption standard published by the US National Institute of Standards and Technology.
What we can see
We say it plainly. Gentle Handover keeps the keys, so your letters can reach your family even without your password. Here is how we keep that power in check.
Yours to take
You can download a copy of what you stored with us, whenever you want.
Made for everyone
We aim for WCAG 2.1 level AA, the international accessibility guidelines from the W3C. Read our accessibility statement.
This website
What humanful.org does with your visit
One small script
This website runs one small script of its own, only to remember light or dark. No cookies, no analytics, no forms, no database.
Your choice stays with you
Light or dark is kept in your own browser and never sent to us. With the script switched off, every page still works and follows your device's setting.
Nothing from other websites
It loads nothing from other websites, and its typefaces are served from this site. It never stores anything you type: to reach us, you write an email.
Report a security problem
Found a problem? Tell us.
If you believe you have found a security problem in anything Humanful makes, please write to us.
- Where to write
The same address in the standard security.txt format: /.well-known/security.txt
- What helps
What you found and where, the steps to reproduce it if you can, and how to reach you.
How we build
Encryption, tests, the audit trail and accessibility, with how we know each one.