What we do with what you tell us

What we hold

• If you create a memorial: your email address, your name if you give one, and your password, which is stored scrambled and can't be read by us or anyone else.
• If you contribute a memory: your name, the relationship you chose, and what you said. An email address only if you give one. We use it to send you the finished biography if you ask for it and, if the family has switched reminders on, one reminder. Nothing else.
• About the person being remembered: whatever the family chooses to add — their name, dates, and the memories people share.

What we don't keep

• We do not keep any audio. When you speak, the sound goes from your browser straight to the transcription service and is never stored on our servers — only the words come back.
• We don't record IP addresses, browser fingerprints or advertising identifiers, and there are no third-party trackers on this site. The services that handle payments and email do see your IP address while they do that job.
• Our server logs never contain what people say or their email addresses, and they're overwritten as new ones come in.
• We don't sell anything to anyone, and we don't share memorials with people who weren't given the link.

Who else sees it, and where

• Hetzner, in Finland, runs the server the site lives on.
• Neon, in Europe, holds the database: accounts, memorials and memories.
• Deepgram, in the United States, turns speech into words as you talk. The audio goes there straight from your browser, and we've opted out of their programme that keeps recordings to improve their models.
• If Deepgram is down, we may switch to OpenAI's transcription, in the United States, until it's back. OpenAI doesn't train on it, but may keep it for up to 30 days to check for abuse, then deletes it.
• OpenRouter, in the United States, passes the words people share to the AI that writes the interview questions and the biography: Anthropic's Claude and OpenAI's models, running on Amazon and Microsoft cloud services. We only allow providers that keep nothing once they've answered, and none of them train on it.
• Stripe, in Australia and the United States, handles payment and sees the payer's email address. We never see card details.
• Resend, in the United States, delivers the emails we send.
• Each of these is a supplier doing one job for us. None of them are given a memorial to do anything else with.

How long

• Memorials and memories are kept for as long as you want them.
• Delete a memorial and it disappears immediately. We hold it for thirty days in case the deletion was a mistake, then erase it permanently — the biography, every memory. Our database keeps a short rolling history for recovery, so the last trace is gone within six hours after that.
• The counts we keep to see whether the site is working are deleted after twelve months. They're linked to a random code for the visit, never to your name or email address.

Getting it back, or getting rid of it

• Open a memorial and choose Export. You get the biography as a PDF, every memory as a text file (including any that aren't in the biography, kept in their own folder). It's yours; we claim no rights over any of it.
• If you contributed a memory and want it removed, ask the person who invited you, or ask us and we'll do it.

If you were invited by someone else

You never signed up for anything, and you shouldn't have to. You don't need an account, you can skip any question without saying why, and you can ask us to remove what you shared at any point. If we ever email you, there's a one-click way to stop in every message, and we honour it permanently.