Privacy policy

Who is responsible

[operator legal name to be supplied] ([company number to be supplied]), of [registered address to be supplied], is the data controller for everything described here. Write to [contact email to be supplied] with any question about your data, including any of the requests below.

What we collect

The account details you register with, and whatever you choose to write into your archive — biography, photographs, timeline entries, stories, letters, and your answers to prompts. Nothing here is shared while you are alive.

We also keep the ordinary technical records a hosted service produces: sign-in times, and a log of significant actions such as a death being reported or a memorial being published. That log records what happened and who did it; it does not copy the contents of anything you wrote.

Why we are allowed to hold it

For your archive and your account, the legal basis is the contract between us: you cannot be given this service without it. For the death verification process the basis is our legitimate interest, and yours, in not publishing a memorial for someone who is alive. Where you are asked to tick a box — before archive material is sent to an AI service, for example — the basis is your consent, and you can withdraw it by not using that feature again.

Trusted contacts

The name, email, and relationship you give us for each trusted contact, used only to invite them and, later, to notify them and you as part of the death-report process.

A trusted contact never gains access to your archive by being trusted. While you are alive they can see your name and whether your account is still active, and nothing else. Invitation links are stored only as a one-way hash, so a copy of our database does not yield a working invitation.

Death certificates and proof documents

A document uploaded to support a death report is held in a private store that has no public access of any kind. It is never published on a memorial, never included in an archive export, and is shown only to the person reviewing that specific report, through a link that expires in sixty seconds. Each viewing is logged.

Who else processes it

We use the following services to operate this one. Each processes data only on our instructions.

• Supabase — Database, authentication and file storage (Ireland / EU (eu-central-1))
• Vercel — Application hosting and content delivery (Global edge network)
• [email provider to be supplied] — Sending invitations and death-report notifications ([to be supplied])
• Stripe — Payment processing for memorial hosting (EU / United States)
• OpenAI — Drafting a life story from archive material you explicitly select, only when you use that feature (United States)

The AI drafting feature is the only one that sends the contents of your archive anywhere else, it does so only for the specific items you select, and only when you ask it to. If you never use it, nothing you write leaves our own infrastructure.

How long we keep it

Your archive is kept for as long as your account exists. That is the point of it: this is a service for things meant to outlast you, and we do not expire them.

If you ask us to close your account, we hold the request for 30 days before acting on it, so that a request made in haste or by someone who reached your screen can be undone. After that window your account, your archive and your uploaded files are removed.

Two things outlive that. Records of a death report and its review are kept, because a memorial published on the strength of them needs an account of how it came to be published. Payment records are kept for as long as tax law requires. Neither contains what you wrote.

Once a memorial is published it is no longer yours alone to withdraw: it exists for the people who are grieving. Removing one after death is handled case by case, by writing to [contact email to be supplied].

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable form. Two of those you can exercise yourself, without asking anyone:

• A copy of everything — Settings has an export that builds a single file containing your profile, timeline, stories, letters, prompt answers and every photograph at full resolution, including the items you have sealed.
• Closing your account — also in Settings, with the 30-day window described above, and reversible within it.

For anything else, write to [contact email to be supplied]. We answer within one month. If you think we have handled your data badly you can complain to your national data protection authority, and you do not need our agreement to do so.

Where your data is held

Your archive and its files are stored in the European Union. Some of the services listed above operate outside it; where data reaches them it is covered by the European Commission’s standard contractual clauses.