Privacy, in plain words

Photos and stories from a celebration of life are personal. This is exactly what we keep and who can see it.

What we keep

• Hosts: your name, your email address and a password (stored only as a one-way hash), the celebration's name, colors, welcome message and optional portrait or floating picture, and, if you add them, a question for guests and a line saying who to ask for help.
• Guests: the first name or nickname you type, and, if the host asks a question, your answer to it. There is no account. A small cookie on your phone remembers who you are so you aren't asked again.
• Photos: a re-saved copy of each picture you send, with an optional note, year and chapter. Location data and camera details are removed. Your name is written into the file so it travels with the photo.
• Messages: if the host turns on the memory wall, anything you write on the back of a photo or in the guestbook, and any voice message you record. Voice messages are saved as short audio files.

Who can see what

• The host and anyone the host adds to the hosting team see everything in the celebration: every photo, message, recording and guest name.
• A guest sees only the photos sent from their own phone, until the host turns on the memory wall. With the wall on, guests who have the invite code can see the photos the host has let onto it, with the names and answers people gave, the messages on the back and the guestbook. By default, the host looks at everything before it appears.
• If the host makes a view-only link, anyone who has that link can look at what is on the wall. They can't add, change, download or remove anything. The host can switch that link off at any time.
• The person who runs this server can see what is stored, and can remove content to keep the service running. We don't look through celebrations otherwise.
• Nobody else. Photos and recordings are not on a public web address, and each one is checked against who is asking before it is sent.

Using the microphone

Only if you tap "Record a voice message", and only while you are recording. Your browser asks first. The recording stays on your phone until you press send, and you can listen back and record it again or remove it.

Cookies

Only the ones that make the site work: one that keeps hosts signed in, one that remembers a guest's name on their phone, one that protects forms from forgery, and your light or dark choice. No advertising or tracking cookies, and no analytics.

Keeping and deleting things

• Guests can remove any photo they sent from the same phone, and can fix their own notes.
• Hosts can remove any photo, message or recording, block or remove a guest (with their photos), download everything, archive the celebration so it stays safe and read-only, or delete the whole celebration and their account from Settings. Deleting is permanent.
• A celebration stays until its host deletes it or the server owner removes it. A copy of the database (names, notes and messages, not the photos) is kept for a couple of weeks as a safety net, and so deleted items can take that long to disappear from it.

Children

This site is meant for families to use together. Children are welcome to join in, but always through a grown-up: we don't let children under 13 send anything on their own, and we don't knowingly collect information from them.

• When a host allows it, the welcome screen asks "Are you 13 or older?". If the answer is no, nothing typed is kept, and the child is asked to get a parent or another grown-up. This browser remembers that answer for the visit, so going back shows the same message.
• The grown-up joins with their own name and can say they're sharing with a child. They may add the child's first name, which then shows with their posts ("from Maria (with Leo)"). We never ask for anything else about the child.
• Photos, messages and voice messages added this way are shared by the grown-up, who chooses what to send. A parent can ask the host to remove any of them, or ask us. The grown-up can also remove their own photos when the host allows it.
• If you think a child shared something without a grown-up, tell us and we will remove it.

Questions

[Add a contact email address for privacy questions before launch.]

You can also read the terms of use.