Who can read my letter?
Nobody. The letter, nickname and goals are AES-256-GCM encrypted before they are stored, with the key kept outside the database. The admin console sees only the address, the date and the state. It is decrypted only to email you and when you open the link in that email.