Privacy Policy

• Memorial submissions: stories/messages, photos, and the candle location you provide (city/country). Locations may be displayed with small offsets to avoid overlapping pins and protect precise addresses.
• RSVP details (memorial event): name, email, phone number, number of attendees, and timestamps.
• Security & operational data: a hashed form of your IP address (combined with a secret “pepper”), your browser user-agent, and basic error/server logs. We verify a bot-protection token server-side to deter automated abuse and then discard it.

Submissions are collected via online forms; uploaded files may be hosted by our file storage system. Curated content is stored in our database and displayed on the gallery and candle map. RSVP details are submitted through a form on this website and protected with a bot-protection challenge.

• To display submissions when you have given consent.
• To organise the memorial and contact you if needed.
• To operate, secure, and improve the website.

Our legal bases include your consent (for public display of submissions) and our legitimate interests in running a safe, functional community memorial (e.g., basic logging and anti-abuse measures).

• Transport encryption (HTTPS) for data in transit.
• Application-level encryption for RSVP phone numbers in our database; only authorised admins can decrypt when necessary.
• Access controls and database rules that block public reads and writes; form writes occur via server-side routes.
• Bot-protection on forms, with server-side verification to help prevent automated abuse.

We use service providers to host the website, store files, maintain our database, render maps, and provide bot-protection. They process data on our behalf solely to operate the memorial. These providers may receive your IP address and basic technical data as part of normal web requests. We do not sell personal information or use advertising trackers.

We aim to use only essential cookies and similar technologies. Bot-protection and mapping may use device checks or set strictly-necessary cookies to provide their services. We do not use advertising or cross-site tracking cookies.

Our service providers store and process data in regions where they operate. Depending on your location, this may involve international data transfers subject to safeguards provided by those services.

We keep memorial submissions while the site remains online or until you ask us to remove them. RSVP information is retained for organising and communicating about the memorial and for a reasonable period afterwards (e.g., confirmations or follow-ups), after which it may be deleted or archived. Server logs are retained for a limited period for security and troubleshooting.

• Visibility: choose how your name and content appear when submitting.
• Access, correction, deletion: request a copy of your data or ask us to update/remove it at any time.
• Withdraw consent: you can withdraw consent for public display at any time.

This site is a community memorial and is not directed to children under 13. If you believe a child has submitted personal information without appropriate consent, please contact us and we will remove it.