Privacy Policy

Loved and Remembered (“we”, “us”) at lovedandremembered.com helps families collect spoken and written memories of a loved one who has passed away. Guests usually reach a memory page by scanning a QR code at a funeral or memorial service. This policy explains what information we handle, where it goes, and the choices you have.

The short version: memories go to the family’s own Google Drive, not to us. We keep only what we need to run the page, we don’t sell anything, and we don’t use advertising or tracking.

If you share a memory (guests)

Guests don’t create an account. When you share a memory we handle:

• Your name, as you type it, so the family knows who shared the memory.
• Your memory: an audio recording made with your device’s microphone, or text you write. We only use the microphone after you tap the record button, and only while recording.
• A scrambled (hashed) version of your IP address, used only to limit how many memories one device can send in an hour, to prevent abuse. We never store your actual IP address.

Your recording or text is uploaded directly to a folder in the Google Drive of the family member who manages the memory page. We don’t keep a copy of the recording or text. In rare cases where a network blocks the direct upload, the recording passes through our server on its way to Google Drive and isn’t stored. We keep a small record of each memory (your name, the file name, the time and the Drive file ID) so the family can see how many memories have been shared.

Your browser remembers the name you typed, on your own device only, so you don’t have to type it again if you share another memory. You can clear it by clearing this site’s data in your browser.

Once shared, a memory belongs to the family, who may keep, play, share or publish it. If you want a memory removed, ask the family, or contact us and we’ll pass your request along.

If you manage a memory page (families)

To run a memory page we store:

• The details you enter: your loved one’s name, dates, a short description and a photo. These are shown publicly on the memory page and on the printable QR cards.
• The page password, stored only as a secure one-way hash, never in readable form.
• If you connect Google Drive: your Google account’s email address, an encrypted access token, and the ID of the folder we create for memories.

Google Drive access

When a family member connects Google Drive, we ask Google for the narrowest Drive permission available (drive.file). It lets us create a “Loved and Remembered” folder and save memory files into it. It does not let us see, open or change any other files in your Drive. We also ask for your email address so you can see which account is connected.

We use this access only to save guests’ memories into your folder and to check that the folder still exists. We don’t read your files, use your Google data for advertising, sell it, use it to train AI models, or share it with anyone else. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

You can disconnect at any time from your page’s manage screen, or by removing “Loved and Remembered” at myaccount.google.com/permissions. Disconnecting deletes our stored token. Files already in your Drive stay there and remain yours.

Site administrators

Site administrators sign in with Google. We use only their email address to confirm they are allowed to manage the site.

Cookies

We use only essential cookies: to keep family members and administrators signed in, and to protect the Google sign-in process. We don’t use advertising cookies, analytics or third-party trackers.

Who else handles data

We rely on a few service providers to run the site. They process data only on our behalf:

• Vercel: hosts the website and stores memory-page photos.
• Neon: hosts our database (page details and the records described above).
• Google: sign-in and Google Drive, where memories are saved.
• Cloudflare: domain name services.

We don’t sell or rent personal information. We would disclose information only if required by law.

Who can see a memory page

Memory pages are open to anyone who has the link or QR code, so guests can share without an account. We ask search engines not to list them. Memories themselves are never shown on the page. Only the family can see them, in their Google Drive.

How long we keep information

We keep a memory page’s details for as long as the page exists. When a page is deleted, we delete its details, photo, Google connection and memory records. Memories saved to the family’s Google Drive are not affected, because they belong to the family.

Security

All traffic uses encrypted HTTPS connections. Google access tokens are encrypted, page passwords are hashed, and IP addresses are stored only in hashed form. No system is perfectly secure, but we work to protect the information we hold.

Children

The site is not directed at children under 13, and we don’t knowingly collect personal information from them. Children may share a memory with a parent or guardian’s help.

Your choices and rights

You can ask us to tell you what information we hold about you, or to correct or delete it, by contacting us. Depending on where you live, you may have additional rights under local law, and we will honor them.

Changes to this policy

If we change this policy, we will update it on this page and change the effective date above.

Contact

Questions or requests: tmeservy@gmail.com