This Policy explains what data mementomori.digital processes, why, how long we keep it and what rights you have. We collect only what the service cannot work without.
1. Who is responsible for your data
The service operator and data controller is Sole proprietor (FOP) Oleh Reshtak, Kyiv, Ukraine. For any question about your data, email reolegsup@gmail.com.
2. What data we process
- Your data: name, email, phone number, preferred email language.
- Recipients' data you provide: name and contact (email or phone).
- Trusted person's data, if you add one: name, email, phone and how you know them.
- For the Memorial tree service: the coordinates of the chosen place, its name, the chosen tree species and your wishes.
- Messages are encrypted in your browser before they are sent (AES-256-GCM). The server stores only ciphertext and a "sealed" key that cannot be opened without the service's private key. The private key is kept offline, outside any server.
- Payment data is processed by Stripe. We never see or store your card number. We store only your Stripe customer and subscription IDs, payment status and date.
- Technical data: IP addresses in web server logs (to prevent abuse); technical session cookies for your account; your language choice in your browser's local storage. We use no advertising or analytics trackers.
3. Why we process data and on what legal basis
- Providing the service (storing messages, check-ins, emails, delivery to recipients) — performance of our contract with you.
- Subscription payments — performance of the contract.
- Security (preventing abuse and unauthorized access) — our legitimate interest.
- Recipients' data is processed to carry out your instruction to deliver messages to them — the legitimate interest of you and the recipients.
- Trusted person's data is processed to find out whether you're okay if we can't reach you, and to avoid a mistaken delivery — the legitimate interest of you and the trusted person. After payment we send them one email saying you named them, where we got their details, and a permanent link to tell us if something happens to you; they can decline, and we'll then delete their details. After that we contact them only from day 25 without contact, or when they've reported something to us.
- Legal compliance (accounting, etc.) — legal obligation.
4. How delivery works
If your payment stops, we email you on day 3, 7 and 25, and from day 25 your trusted person too (if you added one); if needed, the operator calls them. The trusted person never sees your messages; they can confirm you're okay, in which case the protocol is frozen, or tell us at any time that something has happened to you or that you've passed away. Such a report triggers nothing automatically: the operator verifies it personally, including by calling you. If the operator confirms the death, the subscription is cancelled and the protocol moves straight to delivery. If no one responds for at least 30 days, the operator reviews the protocol manually. Only then does the operator decrypt the messages in their own browser, re-encrypt each with a one-time key and send each recipient a personal link. The link key is never stored on the server. At the moment of delivery, the operator technically has access to the message text — this is unavoidable, as delivery would otherwise be impossible. If you cancel the subscription yourself, or click "I'm here" without paying, the protocol is frozen and nothing is delivered.
5. Who we share data with
We do not sell data or share it for advertising. Data is processed only by providers the service cannot run without:
- Stripe — payments and subscription management;
- Resend — service emails (email confirmation, check-ins, account sign-in);
- Hostinger — hosting of the server where data is stored;
- Google Fonts — website fonts; Google receives your IP address when they load.
Some of these providers may process data outside your country, including in the United States, under standard contractual data protection safeguards.
6. How long we keep data
- A protocol that was never paid for — 2 months from creation.
- A frozen protocol — 2 years; we'll email you 30 days before deletion.
- A delivered protocol — 1 year, then deleted completely.
- If you delete a protocol in your account, it is deleted immediately and the Stripe subscription is cancelled.
- Web server logs — up to 14 days. Deleted data may remain in database backups for up to 30 days.
- Stripe keeps payment records under its own policies and applicable law.
7. Your rights
At any time you can: get information about your data; correct it (name, recipients, messages, language — in your account); delete your protocol with all its data; object to or restrict processing; receive your data in a structured format. Email reolegsup@gmail.com — we reply within 30 days. You also have the right to lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights or with the data protection authority in your country.
8. How we protect data
Messages are encrypted on your device; connections use HTTPS only; sign-in, check-in and session links are stored only as hashes; server access is restricted. No measure is an absolute guarantee, but the system is designed so that even a database leak would not reveal message contents.
9. Cookies
We use only strictly necessary cookies: for your account session (valid up to 24 hours) and for the operator's admin panel. Your language choice is kept in your browser's local storage. There are no advertising or analytics cookies.
10. Age
The service is intended for people aged 18 and over.
11. Changes to this Policy
We may update this Policy. We'll email you about material changes at least 30 days in advance. The current version is always available on this page.