常见问题

Final Capsule是一个数字遗产服务。你写信息、信件、语音备忘录、照片、视频，寄给对你重要的人。我们存储它们，只有当我们有强有力的证据表明你不再与我们在一起时，我们才会传递它们。整个要点很简单：今天准备的信息，在最重要的时刻传递。

任何想留下足迹的人：给孩子写信的父母、为困难诊断做准备的患者、进入危险情况的人，或简单地不想将重要话语带进坟墓的人。你决定谁读什么，以及何时。

不，永远不要把它当作一个。Final Capsule传递信息，而不是资产。它不处理继承、财产、公证行为或任何正式的遗嘱处置。为此，请咨询公证员或你所在司法管辖区的等效权力机构。将Final Capsule视为与法律遗嘱相邻的情感、个人层，而不是代替。

Final Capsule由独立团队运营。你可以通过contact@finalcapsule.com与我们联系。法律信息可在服务条款中获得。

不。你可以在免费计划上创建账户、写你的第一条信息、配置知己和守护人，无需信用卡。如果你稍后需要更多胶囊、大型附件或更长的保留期，一次性终身升级会解锁这些功能。

三件事，所有三件都是强制性的：至少一个知己（信息的收件人）、至少一个守护人（可以确认你状态的受信任的人）以及至少一个书写和保存的胶囊。没有这三个，验证周期被跳过，设计上没有任何东西可以被传递。

是的。一个人可以同时占据两个角色，如果你想要一个自检系统，你甚至可以将你自己的电子邮件地址列为守护人和知己。也就是说，我们强烈建议至少有一个人除了你自己，以便守护人步骤实际上达到其目的。

写第一个胶囊、添加一个知己和一个守护人大约需要五分钟。你可以随时之后完善一切。

我们使用一个具有内置冗余的两阶段验证节奏。首先，一个休眠阶段，我们除了等待什么都不做（长度是你设置的检查间隔，默认12个月）。其次，一个活着检查阶段，我们最多向你发送三次电子邮件，每七天一次，每次都有一个一键确认链接。第三，一个守护人阶段：如果你在三次提醒后没有回应，我们最多向你的每个守护人发送三次电子邮件，每七天一次。最后，传递：当守护人明确确认你的去世时，胶囊被传递，或者在三轮未回答的守护人后自动传递。

使用默认的12个月休眠间隔，最小值大约是12个月加6周：休眠年、你的三次每周提醒、你的守护人的三次每周提醒，然后才是自动传递。如果守护人更早确认你的去世，传递在该确认之后立即发生。

是的，从设置页面。如果你处于高风险情况，较短的间隔会很有用；较长的间隔适合正常生活。最小值通常为1个月，最大值为数年。更改间隔永远不会缩短已在进行中的检查，它只影响下一个周期。

节奏故意慷慨。在休眠阶段和三次活着提醒之间，在任何守护人被接触之前，你有数周的缓冲。如果你知道你将无法联系，只需在离开前单击任何活着检查电子邮件，即可重置计数器，或要求守护人如果我们与他们联系，回复你很好。

死亡获胜。当任何守护人确认你的去世时，传递被触发，即使另一个守护人已经回复你很好。这是一个故意的安全规则：由于错误的守护人而导致过早传递的风险，在我们看来，远小于由于一个善意的守护人离线而永远不传递的风险。

没问题。单击活着检查链接只是重置周期。如果你稍后无法联系，节奏在下一个休眠过期时重新开始。

是的。从仪表板上，单个按钮刷新你的状态并将下次检查日期向前推移一个完整的间隔。

文本（任何长度），以及在终身计划上，附件如照片、视频、语音备忘录、PDF和其他文件。每个胶囊都有标题、主体、一个或多个知己，以及可选的附件。

在终身计划上，单个附件可以达到几百兆字节。确切的限制显示在上传对话框中，可能会随着时间的推移而演变。

常见图像格式（JPEG、PNG、HEIC、WEBP）、视频（MP4、MOV、WEBM）、音频（MP3、M4A、OGG、WAV）、文档（PDF）。我们使用扩展和魔字节签名验证文件类型，所以重命名文件不会让它通过。

是的，随时可以，直到传递它。文本、标题、附件、收件人：一切都可以从仪表板编辑。

是的。删除是立即和不可恢复的。删除后，胶囊在标准保留窗口内从我们的主存储和所有备份中消失。

Not currently. All capsules are delivered when the verification process determines you are no longer active. Date-based scheduling is not part of the core product.

A Confidant is someone you choose to receive one or more of your capsules after your passing. They do not need a Final Capsule account. All they need is an email inbox.

No. Confidants are never contacted before delivery. Your intentions remain private until the very moment the capsules are sent. This is by design, many users want their messages to arrive as a genuine surprise or a final gesture.

Yes. As long as they have an email address, geography does not matter.

There is no hard limit. Each capsule may have its own set of Confidants, independently of others.

FinalCapsule records the delivery attempt. If an email bounces, we recommend keeping confidant email addresses up to date in your Contacts. You can update them at any time before your capsules are delivered.

A SafeGuard is a person you trust to tell us, if ever we need to ask, whether you are still with us. SafeGuards are contacted only after you have stopped responding to your own alive-check emails. They are the last line of human verification before delivery.

If you miss three alive-check reminders, each SafeGuard receives an email explaining their role and offering a single secure page with two buttons: 'They are fine' (resets the cycle, no capsule is sent) and 'Confirm their passing' (triggers immediate delivery of all capsules to all Confidants). The confirmation page includes a second screen for the death button to prevent misclicks.

No. Everything happens through a unique, time-limited token in the email link. No account, no password, no software.

At least one is required; we recommend two to four. More than one gives the system redundancy if someone is unreachable; too many may cause confusion.

No. SafeGuards never see the content of your capsules. They only confirm your status. Access to the messages is strictly limited to the Confidants you have designated for each capsule.

After three unanswered rounds (roughly three weeks of SafeGuard silence on top of the prior three weeks of your own silence, on top of the dormant year), capsules are delivered automatically. This guarantees the service fulfils its purpose even when your SafeGuards cannot be reached.

Yes, you can add or remove SafeGuards at any time from the Contacts page. If your capsules are already in the SafeGuard confirmation phase, the updated list will be used for any remaining confirmation attempts.

By email, from our infrastructure, to each Confidant separately. Text is included in the body of the email. Attachments are delivered as secure download links that remain valid for seven days after delivery.

Not yet. You can see the title and recipients of each capsule from the Messages page. A full preview feature is on the roadmap.

We do everything technically possible to ensure delivery, but, as with any email service, we cannot guarantee that an external mail server, a full inbox, a spam filter, or an unreachable recipient will accept the message. Final Capsule offers a best-effort notification service, not a legally enforceable delivery contract. See the Terms of Service for the full disclaimer.

The message is marked as attempted, and the delivery is logged in our system. We do not automatically retry indefinitely. If you have several Confidants on a capsule, others still receive it normally.

No. Once the verification process has reached the delivery step, the process is considered irrevocable. This prevents a compromised account from being used to stop a legitimate delivery.

Every connection is encrypted in transit (TLS). Data at rest is stored on encrypted volumes. Passwords are hashed with a modern one-way algorithm. Infrastructure is hosted in the European Union with strict access controls and regular backups.

Our policy is to not access user-generated content. Technically, operational staff have the ability to read data required to run the service (for example during an abuse investigation or a legal request). We are transparent about this rather than promise zero-knowledge encryption we would not actually implement. If you want stronger protection, encrypt sensitive content yourself before uploading.

2FA is on the roadmap. In the meantime, use a strong, unique password and a reputable password manager.

Under GDPR, any personal data breach likely to result in risk to users is notified to the competent data protection authority within 72 hours and, where the risk is high, to affected users directly.

Security is a continuous process. We perform regular internal audits and address findings promptly. External audits are performed at our discretion.

No. Your data is never sold, rented, traded, or exposed to third-party advertising networks. The service is paid for by users, not by advertisers.

The full set: access, rectification, erasure, restriction, portability, and objection. You can delete your account and all associated data from the Settings page. For a full data export request, contact us at the email listed in the legal notice. For any other request, write to contact@finalcapsule.com.

On servers located in the European Union. Subprocessors (email delivery, payment processing, object storage) are selected for their GDPR compliance.

Only strictly necessary cookies for authentication and session management. No tracking cookies, no advertising cookies, no analytics pixel that profiles individuals.

Primary data (capsules, contacts, attachments, verification tokens) is deleted immediately. Residual data in backups is overwritten within a standard retention window (typically 30 days). After that point, no personal data remains.

Account, capsule creation, text messages, Confidants, SafeGuards, the full verification and delivery engine, and GDPR export / deletion tools. No credit card needed.

A higher number of capsules, attachment uploads (photos, videos, audio, PDFs), larger storage quotas, and priority support. It is a one-time payment, billed once, not a subscription.

Lifetime refers to your use of the service for as long as the service exists. It is not a perpetual obligation binding future operators of the platform. In the unlikely event that Final Capsule is discontinued, we will provide advance notice and an export of your data; beyond that, Lifetime does not create any right to a monetary refund. This is detailed in the Terms of Service.

Lifetime upgrades are non-refundable once the plan has been activated. No general statutory withdrawal right applies to digital services performed immediately with your consent; mandatory consumer protections of your country of residence are reserved where applicable.

€79 is a considered price that reflects the real, ongoing cost of running a service you pay for once but that we operate forever. Behind every capsule is a stack that runs 24/7: a VPS server in the EU, a PostgreSQL database, S3-compatible object storage (Garage) for your encrypted attachments, and transactional email delivery via Resend (billed per message sent, including every check-in, alive-check, and delivery). On top of that, a cron job verifies your status every day, indefinitely. Unlike a subscription model where revenue keeps pace with costs, a lifetime deal means we absorb years of infrastructure costs from a single payment. €79 is the price point we calculated to make the service financially sustainable without compromising on privacy, reliability, or the promise that your capsules will be delivered when they matter most. The current launch price of €49 is a temporary offer while the service is new.

Major credit and debit cards via Stripe. No card data transits or is stored on our own servers.

We take continuity seriously, but we cannot promise eternity. If the service is ever discontinued, we commit to: (a) giving users reasonable notice via email, (b) providing a data export so you can move your content elsewhere, and (c) ceasing any further billing. We do not commit to finding a successor platform, carrying out posthumous deliveries after shutdown, or offering monetary compensation beyond what consumer law strictly requires. Please treat Final Capsule as a useful tool, not a lifelong guarantee.

Final Capsule is a best-effort notification facilitator, not a common carrier of communications or a licensed fiduciary. Our liability is expressly limited by the Terms of Service, which you accept on registration. In practice, we deliver reliably; but the legal framework is clear about the limits of our responsibility.

You do. You retain all intellectual property rights on the content you create. You grant Final Capsule only the narrow licence required to store, transmit, and deliver your capsules as you have configured them.

No. Final Capsule accounts are personal and non-transferable. We do not recognise heir access requests as a basis for releasing credentials. Your Confidants receive exactly what you prepared, nothing more. For broader estate matters, consult a legal professional.

The Terms are governed by the law of the Operator's place of establishment, with exclusive jurisdiction of the competent ordinary courts at that seat, without prejudice to mandatory consumer protection rules in your country of residence. Full details in the Terms of Service.

Check your spam folder, then add contact@finalcapsule.com to your trusted senders. From the dashboard you can also request a fresh verification email. If the issue persists, contact support.

Deletions are immediate and irrecoverable. This is intentional, it protects you from an attacker who would want to hold recovery hostage. Re-create the capsule from your own backup if you had one, or from memory.

The link is time-limited and single-use. If it has expired, simply wait for the next round of reminder emails or ask the user to trigger a new round from the dashboard. Support cannot reissue a SafeGuard token manually, by design.

Email contact@finalcapsule.com. We answer in English, French or German, typically within a few business days.