Your memories will still be here.

Time Capsule is built around a simple faith: that what you seal today will be readable by whoever you meant to reach it — in ten years, in twenty-five, in more. That promise is easy to make and easy to break. We want to make it harder to break.

This page explains exactly what we're committing to, how we're structured to keep that commitment, and what you can do if we ever fail.

What we won't do

These are constraints we've placed on ourselves — not aspirations, not preferences. Constraints.

• We will never raise venture capital or take institutional investment. VC-backed companies get acquired. Acquired companies get shut down.
• We will never sell the service or its user data to a third party.
• We will never shut down with less than 12 months' notice — and only after every user has been given tools to export everything they stored here.
• We will never make stored content inaccessible as a consequence of a pricing change. If you paid for Legacy, your capsules open regardless of what happens to the service commercially.

The stewardship model

Single points of failure are the enemy of 30-year commitments. The founder gets sick. A company goes under. A country changes its laws. Any of these can end a service overnight.

So the service runs with a minimum of five named custodians — people spread across countries and generations, each with full access to the infrastructure, the codebase, and the ability to keep things running independently if everything else fails.

At least one custodian must be under 30 years old. At least two must be in different countries. All five must confirm annually — publicly, on this page — that the service is funded and operational.

The sustaining fund

A percentage of every Legacy plan payment goes directly into a dedicated sustaining fund — separate from operating revenue, not accessible for day-to-day costs. This fund exists for one purpose: to keep the service running if it stops growing.

This is the same model that Posthaven uses. The idea is simple: if the service ever stops generating enough revenue to sustain itself, the fund covers it — for as long as the fund holds. Legacy users are not just paying for features. They are contributing to the structural resilience of the archive.

Data portability — the hard guarantee

This is the one promise that doesn't depend on the service staying online.

Your memories belong to you. The service is the vehicle, not the vault.

What we're not promising

Honesty matters more than reassurance here.

• We are not promising the interface will look the same in 30 years. Technology changes. The UI will change.
• We are not promising every feature will exist forever. Some things may be deprecated.
• We are not promising uninterrupted uptime — outages happen. We are promising the content is never lost.
• We are not promising "forever" in the absolute sense. 30 years is what we can commit to with structural backing. What comes after is our intention, not our guarantee.

How to hold us to this

This page is the public record. If we ever act against anything written here, you can point to it. The custodians are named here. The terms are written here. This is not a legal contract — but it is a public promise, made by people who've put their names to it, and that is worth something.

If you believe we are in breach of this pledge, you can contact any named custodian directly. Their contact information is linked from their name once confirmed.

The full codebase for this service is available for audit. The data format is documented. We have designed the system so that it could be run independently of us.