Privacy
We built this to protect memories, not to harvest them. Here is exactly what we do with your data.
We never sell your data. We never show ads. We never use your memories, photos, voices or writing to train AI. Not ours. Not anyone else's.
What we collect
- Your account email and name.
- The memorial details you write — the person's name, dates, description.
- The photos, videos, audio and text you and your circle upload.
- Basic technical logs (IP, browser) to keep the service running and safe.
Why we process it (legal basis)
- Contract: to provide the service you signed up for.
- Consent: for optional email notifications, which you can turn off at any time.
- Legitimate interest: to keep the service secure and to prevent abuse.
Where your data lives
Everything is stored on servers inside the European Union, through our infrastructure providers Supabase and Lovable Cloud. Files (photos, audio, video) are stored in EU object storage.
How long we keep it
- Paid memorials are kept for as long as they exist — that is the promise.
- Trial memorials are archived after 90 days of inactivity.
- Archived trials are permanently deleted after 12 months of no activity, following a warning email.
- You can ask us to delete anything, at any time, and we will.
Your rights (GDPR)
You have the right to:
- See the data we hold about you.
- Correct anything that's wrong.
- Ask us to delete it.
- Get a copy of it in a portable format.
- Object to processing or restrict it.
To exercise any of these, email hello@aplacetoreturn.to. A real person will reply, usually the same day.
About the people being remembered
GDPR does not cover data about people who have died. But we treat their memory, their photos and their voices with the same care as if the law did apply — because that is the whole point of this place.
Who else touches your data (sub-processors)
- Supabase — database and file storage, hosted in the EU.
- Stripe — payment processing. We never see your card details.
- Lovable — email delivery for account and notification emails.
Cookies
We use only the essential cookies needed to keep you signed in. No tracking cookies. No analytics cookies without your consent. If that ever changes, you'll see a small banner asking you first.
Complaints
If you feel we've mishandled your data, please write to us first — we take it seriously. You also have the right to complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), autoriteitpersoonsgegevens.nl.
Last updated 15 July 2026. If we change anything meaningful, we'll email you 30 days before it takes effect.