1. Introduction

Welcome to Memorial.Earth. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information:

• Account information (username, email address)
• Profile information (avatar, biography)
• Memorial information (names, dates, locations, images, biographies)
• Payment information (processed securely through third-party payment processors)

2.2 Usage Information

We automatically collect information about how you use our platform:

• Device information (browser type, operating system)
• Usage patterns and interactions with memorials
• Location data (when you create memorials or use location features)

3. How We Use Your Information

We use the information we collect to:

• Provide and maintain our services
• Process transactions and manage your account
• Display memorials and content you create
• Improve our platform and user experience
• Communicate with you about your account and our services
• Comply with legal obligations

4. Data Storage and Security

We use industry-standard security measures to protect your information. Your data is stored securely using Supabase, a trusted cloud database provider. We implement appropriate technical and organizational measures to protect against unauthorized access, alteration, disclosure, or destruction of your personal information.

As a Czech-based company operating within the European Union, we comply with the General Data Protection Regulation (GDPR) and other applicable EU data protection laws.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

• Public Memorials: Memorial information you create is publicly visible on our platform as intended
• Service Providers: We may share information with third-party service providers who assist us in operating our platform (e.g., payment processors, hosting services)
• Legal Requirements: We may disclose information if required by law or to protect our rights and safety

6. Your Rights (GDPR & CCPA)

European Union and United Kingdom Users: As a user located in the European Union or United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR) and UK GDPR:

• Right of Access: Access and review your personal information
• Right to Rectification: Update or correct your personal information
• Right to Erasure: Delete your account and associated data (right to be forgotten)
• Right to Data Portability: Request a copy of your data in a structured, machine-readable format
• Right to Object: Object to processing of your personal data
• Right to Restrict Processing: Request restriction of processing your personal data
• Right to Withdraw Consent: Withdraw consent for data processing where applicable

To exercise these rights, please contact us through our support page. We will respond to your request within 30 days as required by GDPR.

7. Cookies and Tracking

We use essential cookies that are necessary for the platform to function properly. These cookies cannot be disabled as they are required for core functionality.

7.1 Essential Cookies

We use the following essential cookies:

• Authentication Cookies: We use Supabase authentication cookies (sb-[project]-auth-token) to maintain your login session. These cookies are essential for keeping you logged in and securing your account. They expire when you log out or after a period of inactivity.

These cookies are strictly necessary for the platform to operate and do not require your consent under GDPR. You can control cookies through your browser settings, but disabling essential cookies will prevent you from using certain features of the platform, including logging in and accessing your account.

8. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Account Data: We retain your account information for as long as your account is active. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal purposes.
• Memorial Data: Memorial information you create is retained permanently as part of the memorial record, unless you request deletion and we are able to comply with your request.
• Transaction Data: We retain transaction and payment information as required by law (typically 7 years for tax and accounting purposes).
• Analytics Data: Aggregated, anonymized data may be retained indefinitely for analytical purposes.

9. Data Breach Notification

In the event of a data breach that may affect your personal information, we will:

• Notify the relevant supervisory authority within 72 hours of becoming aware of the breach (as required by GDPR)
• Notify affected users without undue delay if the breach is likely to result in a high risk to your rights and freedoms
• Provide clear information about the nature of the breach, the data affected, and the steps we are taking to address it
• Advise you on steps you can take to protect yourself from potential harm

We implement industry-standard security measures to prevent data breaches, but no system is completely secure. We are committed to transparency and will keep you informed of any significant security incidents.

10. Third-Party Services

We use the following third-party services that may process your personal information:

These third-party services are contractually obligated to protect your information and use it only for the purposes we specify. We do not sell your personal information to third parties.

11. Children's Privacy

Our platform is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.