What happens to your words
The full answer, including what I don’t promise yet.
In this hour you write down things you tell almost no one.
So you deserve to know exactly where they go. Below is the whole story.
In short
One destination
Your words become your document. Nothing else happens to them.
Encrypted, in Europe
Stored in Ireland, under European law.
You press erase
One button, all gone. Do nothing, and I erase it after thirty days.
A few emails
A few quiet emails come with your hour: your words when they are ready, and a handful of gentle notes afterwards. Under every email sits one link to choose what you receive.
Step by step, from typing to gone
This is the entire route your text travels.
- You typeYour answer first sits only in your own browser, so you can pause and continue later. That working copy on your own device is not encrypted at rest by Last Hour Experience: anyone with your unlocked phone or laptop could read it.
- A copy travels alongIf you are signed in, a copy travels over an encrypted connection to the server and is stored there encrypted with AES-256-GCM.
- Your hour becomes your documentAt the end, your answers and your letter are compiled into one personal document.
- It waits in your accountEncrypted, for you alone, ready to download.
- Then it goesOnce you have downloaded it, I erase the core copy. Do nothing, and it happens within thirty days anyway, with a reminder first.
- Or sooner, if you wantYour account has one button that deletes all of your content permanently.
What I can and cannot see
The honest answer, including the part that is not finished yet.
I do not read your answers. There is no screen where they pass by and no work process in which someone looks at them.
What the systems do: they decrypt your text at the moment you resume your hour or have your document generated. That happens automatically, inside the function itself.
And this I don’t promise yet
This is usually where you hear “100% secure”. I would rather tell you where the line actually sits today.
There is still one technical key with which my systems can decrypt your stored text. There is no screen where anyone reads your words, and no one does, but technically it would be possible. So I don’t call it impossible.
I am building the version where that key sits only with you. The moment an independent security audit has confirmed that Last Hour Experience cannot read your stored words, the date will be here.
And the experience does not open while that key is still mine.
Advertising and AI
What does not happen here matters as much as what does.
- Your answers, letters and messages never go to Meta, Google or any other advertising platform.
- They are never used to build a profile of you or to target you with ads.
- They are never used to train AI models.
- They are never sold or shared for commercial purposes.
The only text that ever passes an AI is text you yourself submit for publication on the public wall or as a testimonial. That gets an automated check first. Your private answers never go there.
Where it sits and for how long
Per type of data, with the same term I committed to in the privacy policy.
| What | Where | How long |
|---|---|---|
| Your answers, your letter and your document | Encrypted in your own account, on servers in Ireland | Until you download or delete them yourself, and thirty days at most |
| The working copy in your browser | On your own device only | Gone as soon as you complete the hour, otherwise thirty days after the last save |
| A First Deed reminder you switch on yourself | Separate and encrypted, only that one sentence | The 48-hour copy is gone within 72 hours; the yearly copy stays until you switch it off |
| Your email address for Early Access or the newsletter | The Vita Florentis member administration | Until you unsubscribe |
| Payment and transaction data | Stripe and the bookkeeping | As long as tax law requires |
| The cookieless page count | My own database in Ireland | Holds no visitor ID, no country and no query string as long as you give no consent |
This stays true
These rules are locked in automated tests. They run before the site goes live, and if one fails, that release does not ship.
- Before you choose anything and after “reject all”: only the cookieless page count, nothing else.
- Analytics only: Google Analytics and Cloudflare load, Meta does not.
- Marketing only: Meta loads, analytics does not.
- Withdrawing consent: everything falls back to the cookieless count.
- Private pages such as your account, checkout and the experience itself: zero trackers.
- YouTube loads only after you click the video yourself, and then through the privacy-enhanced variant.
And after every release I measure whether a first-party console error has appeared.
Your controls
Everything you can do yourself, and how fast you get an answer.
- Access, correct, take with you or have deleted: email me. In Europe you get an answer within one month, in the United States within 45 days.
- Erase your answers yourself: one button in your account, without going through me.
- Change your cookie choice: Your Privacy Choices, at the bottom of every page.
- If your browser sends a Global Privacy Control signal, I switch marketing measurement off without you having to do anything.
Found a hole?
Report it directly and I will fix it. You get a personal reply from me.
I only ask that you don’t publish it before it is closed, and that you don’t view or keep anyone else’s data.
The documents
Last updated on 6 August 2026.