Privacy Policy

1. Our Privacy Commitment

At Farewell Cards, we recognize that digital memorials contain deeply personal memories, photos, and family histories. We adhere to a strict privacy-first policy: we do not sell your personal data, and we do not serve third-party advertising on memorial pages.

2. Information We Collect

We collect only the minimum data required to provide a secure and functioning service:

• Account Information: Name, email address, and authentication credentials when you sign up via Email or Google Auth.
• Memorial Page Content: Biographies, photos, videos, dates of birth/death, and custom styling settings provided by page creators.
• Visitor Contributions: Names, candle tribute timestamps, messages, and optional voice recordings uploaded by visitors.
• Payment Records: Payment status, selected currency, and transaction IDs provided by our Merchant of Record Polar.sh and Stripe. Farewell Cards never sees or stores full credit card numbers.

3. Infrastructure & Security Measures

Your data is hosted on enterprise-grade Google Cloud infrastructure (Firebase):

• Firebase Authentication: Secure identity management protecting user logins.
• Cloud Firestore: Encrypted database storing memorial configurations and tributes.
• Firebase Storage: Secure cloud storage hosting gallery photos and Voice Vault audio files.
• SSL/TLS Encryption: 256-bit encryption for all network traffic between your browser and our servers.

4. Privacy Controls for Memorial Owners

Memorial page creators have complete control over page visibility and public discovery:

• Public Pages: Accessible to anyone with the link or QR code.
• Password-Protected Pages: Requires visitors to enter a custom password set by the owner.
• Search Visibility: Owners can choose whether a memorial page appears in search engines or remains unindexed.

5. Cookies & Local Storage

We use essential session storage and cookies exclusively for:

• Maintaining authenticated user login sessions.
• Storing user currency preferences (USD, EUR, GBP, CHF, CAD, AUD).
• Enforcing 24-hour rate limits for virtual candle tributes to prevent spam.

6. Your Rights & Data Deletion

You have the absolute right to request access to, correction of, or permanent deletion of your personal data and memorial pages. Primary owners can delete their memorial pages directly from the account dashboard or by contacting support.