Website
Founding-list signup
When you join the founding list, the form saves the email address you enter and the time of signup in Replit PostgreSQL for this website. There is no public list, download link, or account attached to the address.
To protect the form from abuse, the site sets a first-party signed device cookie that lasts about 10 minutes (the device rate-limit window). The cookie is named chapter_device. Only when this app itself marks the connection as HTTPS does it instead use __Host-chapter_device with the Secure flag. With the current proxy-hop setting (WAITLIST_TRUSTED_PROXY_HOPS=0), the published site typically sees the proxy connection and therefore sets chapter_device without Secure. The site also stores short-lived hashed rate-limit counters in PostgreSQL. Those counters are digests derived from your network and device token — not your email address or raw IP address.
Founding-list emails are kept until you ask for deletion. Chapter may use the address to tell you when a founding place opens and for related founding-program contact. To request deletion, email the contact address below.
Who processes website data
- Replit — hosts the website and the PostgreSQL database that stores founding-list emails and the hashed rate-limit counters.
- Resend — sends the optional welcome email after a new signup, only when welcome email is enabled on the server. Signup still succeeds if email is off, capped, or a send fails.
- Umami (via Replit) — on the published site, Replit’s publishing proxy injects an analytics script from
i.replit.com. That script records page-view analytics for the live site. Development previews do not include that script. The founding-list form may also emit fixed event names only (founding_list_submitted,founding_list_saved) with no email address or other personal fields.
This repository does not embed other third-party trackers, ads, or marketing pixels.
Founding program photos
Separately from the email form, the first founding families may send about twenty photos so the owner can build that family’s chapter by hand.
Those photos go only to the owner, only to build that family’s chapter. They are deleted 30 days after the chapter is delivered.
iPhone app (in development)
Chapter for iPhone is designed to keep your child’s photos and words on your device. Optional sync uses your own private iCloud. There is no Chapter account.
App behavior will be confirmed in the product’s own privacy materials when it ships; this page states the planned model only.
Contact and deletion requests
To ask a question about this page, or to request deletion of your founding-list email (and, if applicable, founding-program photos still held for a hand-built chapter):
hello@send.chapteredition.com for privacy questions or to request deletion of founding-list data.