Data processing notice.

Status of this notice

This page describes the current technical operation. The formal privacy notice remains incomplete until the controller’s verified identity, address, contact channel and processing/transfer grounds are confirmed. Identity and death certificate uploads remain closed until that process is complete.

Information and purposes

Email and authentication data support sign-in; account identifiers and display names support family permissions. Submitted memories, photographs, sources and review requests support memorial management. Saved items and follows are private. Visit history is collected only when you enable it.

The privacy of living relatives, account holders and other people in photographs must be protected. A deceased person’s profile does not give unrestricted permission to share living people’s information.

Providers and international processing

Supabase provides authentication, database and media services; Resend sends sign-in emails; Cloudflare provides network security and bot checks. Opening the map may send imagery requests to NASA, EOX and the terrain provider. These services may receive IP addresses and request information, and processing may occur outside Türkiye.

The operator must verify the legal mechanism and provider agreements required for ongoing international transfers. A checkbox does not replace this review.

Retention and security

Optional visit history is limited to 30 days; disabling it deletes existing history. Family memorials have a 30-day recovery period after removal. When protected document uploads are opened, access to evidence is limited to 30 days. Retention schedules for other account, moderation and backup records require the operator’s legal assessment.

Family content is restricted by access roles. Administrator actions require two-factor authentication. Photographs await review before publication, and uploaded image metadata is removed.

Browser storage and your choices

Authentication information is stored in your browser to keep you signed in. Local demo drafts and preferences may also be stored in that browser. Signing out removes session data; local drafts can be managed on the drafts screen. The application does not load its own advertising trackers.

Your rights and requests

In My data and rights, you can access records, download JSON copies and request correction, deletion, objection or withdrawal of consent. Submitting a request does not mean deletion has occurred; the result and its reasons are communicated separately.