Privacy Policy

This policy explains what personal information missingu.org (operated by missingu) collects, how we use it, who we share it with, and the rights you have.

1. What we collect

• Account information: your email address or phone number; if you sign in with Google / Apple, the name and email they provide.
• What you enter: your display name and profile; the names, dates, birthplace, life story, photos and family relationships you enter for the deceased; messages and obituaries. This can involve living relatives — please only enter what you have the right to share.
• Offering and payment records: offering type, amount, the name shown (you can partly mask it), time and order status. Card numbers and payment accounts are handled by Stripe / PayPal; we do not store them.
• Technical information: IP address, browser type and visit times, used for security, abuse prevention and troubleshooting.
• Cookies: used only to keep you signed in and remember your language — never for ad tracking.

2. How we use it

• to provide and maintain memorial pages, offerings, family trees and reminder emails;
• to process payments and reconcile orders;
• to keep accounts secure and prevent abuse and fraud;
• to answer your feedback and appeals;
• for other purposes required by law.

We do not sell your personal information, do not show ads, and do not build advertising profiles.

3. Who can see your content

• Memorial pages are shown according to the visibility the administrator sets: public, unlisted (anyone with the link), or invite-only.
• Public memorial pages may be indexed by search engines; the administrator can make a page non-public at any time.
• The name on your offerings and your messages on a public memorial can be seen by other visitors (you can partly mask your name).

4. Service providers we share with

To run the service, we pass the necessary information to these providers, who may use it only on our instructions:

• Hosting: Vercel (United States)
• Database: Supabase (Canada)
• Image storage: Cloudflare R2
• Email delivery: Resend (United States)
• DNS and network acceleration: Cloudflare
• Payments: Stripe, PayPal
• Sign-in: Google, Apple (only if you choose to sign in with them)

Beyond this, we disclose information only where the law requires it or to protect the safety of users and the public.

5. International storage

Our servers and database are located in the United States and Canada. By using the platform you acknowledge and agree that your personal information is transferred to and stored in those countries, which may be outside your own.

6. How long we keep it

• Account and memorial content: kept while you use the service; after deletion, removed from backups within 30 days.
• Order records: kept for 7 years for accounting and tax purposes.
• Security logs: up to 1 year.

7. Your rights

You can:

• view and edit your profile and the memorial pages you manage;
• export a memorial page (the "Export" option on its management page);
• unsubscribe from reminder emails (one click at the bottom of every email);
• ask us to delete your account or content you posted, through the "Contact us" page or by emailing [email protected]. We handle requests within 15 business days.

If you believe a memorial page infringes your or your family's rights, you can ask us to act in the same way.

8. Children

We do not knowingly collect personal information from children under 14. If you find that we have, please contact us and we will delete it.

9. Security

Sign-in credentials are stored encrypted; uploaded photos are stripped of location and other metadata; all traffic is encrypted with HTTPS. No system is perfectly secure, and if a security incident occurs we will promptly notify affected users.

10. Changes and contact

Significant changes to this policy will be announced on the site. Questions: [email protected].