Privacy

Keepsake holds memories people care about, so we collect as little as we can and never sell it. This policy explains what we keep, why, and what you can do about it. [Operator legal name] is responsible for your information.

What we keep

• Your account: your email address and the name you go by. There are no passwords; we email you a sign-in code.
• Your age check: when you sign up we ask the month and year you were born, check that you're at least 13, and keep only the fact that you passed and when. We don't store your birthday.
• What you add: the stories, chapters, memories, photos and videos you share, and who you invite. We keep your original files privately as you uploaded them. The copies people see have location and camera details (EXIF and GPS) removed.
• Check-ins and taps: if you check in at a place, which marker and when. A dot tap tells us which dot was read, never where you are.
• Technical information: the devices you're signed in on, IP addresses in short-lived security logs, and error reports when something breaks. If you report an entry without signing in, we keep a scrambled form of your IP address so repeat reports count once.
• Payments: handled by Stripe. We see your plan and billing status, never your full card number.

What we don't do

• We don't sell your information or share it for advertising. There are no ads and no third-party trackers.
• We never show where an object is or who has it now.
• We don't use your stories to train AI models.

Who can see what

• Unlisted stories (the default) can be read by anyone with the link or the dot; search engines are asked not to index them.
• Public stories can appear in search results. Private stories are only visible to people invited to them.
• What you add to a story is shown with the name you go by. The story's owners can see what you added, including anything waiting for approval.
• Owners told about a report never learn who sent it.

Companies that help us run Keepsake

We use a small number of providers, each only for its part: Laravel Cloud and Vercel (hosting), Cloudflare (file storage, video and security), Postmark (email), Stripe (payments) and Sentry (error reports). They process information on our behalf and under contract. Some are in the United States.

How long we keep it

• Your account and what you add are kept until you delete them.
• When you delete an entry, its text and any photos or videos only it used are deleted right away. Copies in backups expire within 35 days.
• When you delete your account, we delete your sign-in details, devices and pending invitations. What you added to other people's stories stays there under your name, unless you delete it first. Stories you own need to be deleted or handed over before the account can go.
• Security logs are kept for up to 30 days.

Your choices and rights

• Edit or delete anything you added, from its page.
• Owners can export a whole story as an archive.
• Delete your account from your account page.
• Depending on where you live, you may have the right to access, correct, delete or move your information, or to object to how we use it. Email privacy@keepsake.app and we'll respond within 30 days. You can also complain to your local data protection authority.

Children

Keepsake isn't for children under 13, and we don't knowingly keep their information. If we learn an account belongs to a child, we delete it. If you think a child has signed up, email privacy@keepsake.app.

Cookies

We use one essential cookie to keep you signed in, and short-lived ones to finish signing in. No analytics or advertising cookies.

Changes and contact

If we change this policy in a way that matters, we'll tell you first. Questions: privacy@keepsake.app, [Operator legal name], [Mailing address].