What we store, in plain words

If you are only reading

Almost nothing, and nothing about you. No account, no cookie, no analytics service, no third party. We do count how many times a page was opened each day — one number, added up. Not who, not when exactly, not from where, and never anything that could be traced back to a person. Scanning a QR code and reading a page still tells us nothing about you.

The one number we keep

Each page has a counter, and so does the site: how many times something was opened on a given day. That is the whole of it — four columns, none of which could hold an address, a browser or an identifier of any kind. It exists so that someone who fixed a code to a headstone can see that a stranger stopped and read it, which is the entire point of this site. Requests from search-engine robots are counted separately so the number a person sees is honest.

If you write a page

We store your email address, so you can sign in and so we can reach you about your own page. We store the display name you choose. We store your preferred language. Nothing else — no address, no phone number, no date of birth, no password.

What you publish

The text, photographs, dates and map pin you put on a page are public, because a memorial page is meant to be read. That is your choice to make and yours to undo.

Keeping the site clean

A free site with no advertising is an inviting place to dump rubbish, so the sign-in form asks your browser to do a few seconds of arithmetic and counts how often one source has tried. That count is a salted number held in memory for fifteen minutes, with a salt made fresh each time the server starts. It is never written to disk, never put in the database, never logged, and cannot be turned back into an address — not by us, not later, not by anyone who asks.

Who else is involved

The still map on a memorial page is fetched by our server and served from this site, so looking at a grave tells nobody else that you did. Only the interactive map, which waits for your tap, is loaded from Google. An email provider delivers your sign-in link. Nobody else receives anything.

Taking it back

You can download everything we hold about you, and you can delete your account and every page with it. Deletion is real deletion, not a flag in a database.