Always & InfinityPrivacy Policy
What we collect
- If you visit a memorial and leave a tribute or a gesture: the name you type and your words. No account and no email address. A random key is kept in a cookie on your device so you can see and remove your own posts; only a scrambled form of it is stored with the post.
- If you create or help manage a memorial: your email address and the name you choose to show, so you can sign in and be recognised.
- What is added to memorials: photographs, stories, tributes, gestures and service details.
- Reminder sign-ups: the email address you give, which memorial, which date, when you agreed, when you confirmed by clicking the link we send, and when you unsubscribed.
- A record of significant actions on each memorial (who published, approved, deleted, and so on).
- Reports you file, with a name and, only if you choose to give it, an email address.
- A scrambled form of your connection address for up to 30 days, used only to stop automated abuse. It is not used to identify you and is cleared automatically.
Where it lives
Your data is stored with Supabase in London, United Kingdom, and served by Netlify. We do not sell data and we show no advertising.
On This Day
A memorial appears on our public On This Day page only when its owner has given explicit consent, and only the details the owner chose (for example name and dates, but not a photograph) are shown. Owners can change or withdraw this at any time, and every change is recorded.
Emails
We send sign-in codes, invitations you have asked for, and reminders you have opted in to. Every reminder contains an unsubscribe link that works without signing in.
Deletion and retention
When a memorial or an account is deleted, it is hidden at once and can be restored within 30 days. After that it is permanently removed, including files. Our own backups roll off within a further week or so. We keep a minimal record (identifiers and timestamps, no names or content) of significant actions for up to 24 months.
If you delete your account, the tributes and gestures you left as a visitor are removed with it. Photographs and stories you added as a member of a memorial stay with that memorial, as our Terms explain.
Your rights
Under UK data protection law you can ask to see, correct, export or erase your personal data. Owners can export everything on their memorial from its admin page. To ask for anything else, see Support.
Photographs and orders of service
Every photograph is re-made on our servers when it is uploaded, whether by a family or by a visitor. The hidden data that phones and cameras embed, such as where the photo was taken and which device took it, is removed before anything is stored, so it never reaches the memorial or anyone reading it. An order of service a family uploads as a PDF is re-saved the same way, with anything in the file that could run on a reader’s device removed. The original file is kept only briefly while it is checked for anything harmful, then deleted.
Cookies
We use only the cookies needed to keep you signed in and, for visitors who post, the key that lets you see and remove your own posts. Public forms use Cloudflare Turnstile to keep out automated abuse; it does not track you across sites. Fonts and images are served from this site, not from third parties.