Privacy policy

What we keep, and why

Only what we need to make your map, run your memory page and keep the accounts the law asks us to keep.

• Your order: your name, email, phone, delivery address, the gift details you type (recipient's name and email, the message, the date) and what you paid. We need it to make and deliver the map, send you emails about it and keep accounts.
• Your design: the place, the size, the finish and the photos you add while designing. Designs that are never ordered are deleted after 90 days at most.
• Your account: your email, your name and, if you set one, a password (stored only as a hash). We use it to let you sign in and to show you your pages and orders.
• Your memory page: the photos, videos, voice notes, letters, music links and text you or the people you invite put on it. We keep them to show the page to whoever opens it, and for nothing else.
• Opens of a page: the date and time a chip or link was opened. We do not record the visitor's IP address or device.

Photos are cleaned, pages are private

When a photo is uploaded we remove its hidden data, including the GPS location where it was taken.

Memory pages are unlisted: they are not in search engines, and only people with the chip, the QR code or the link can open them. You can add a PIN.

Photos added while designing a map are private: they are never shown to anyone else and never used for anything else. If no design uses them they are deleted within two days; otherwise they are deleted with the design.

Who helps us

These companies handle data for us, only to do their part:

• Cloudflare: hosts the site and stores photos and video (stored in the EU).
• Neon: our database (EU region).
• Oracle Cloud: the server that builds the 3D map preview (Marseille, France).
• Stripe: takes payments. Your card details go straight to Stripe; we never see them.
• Resend: sends our emails.
• Packlink and the carrier it books: your name, address and phone, to deliver the parcel.
• Anthropic and similar AI services: only when you ask for writing help on a page, the words and place details you ask about are sent to them to write a suggestion.
• Google (YouTube) and Spotify: when you search for or play a song on a page. Videos play from youtube-nocookie.com.
• OpenFreeMap and Mapterhorn: the map tiles in the designer load from their servers, which see your IP address like any website.

Where it goes

We keep data in the EU where we can. Some of these companies are in the United States or the United Kingdom; when data goes there it is protected by an adequacy decision or the standard contractual clauses.

How long we keep it

• Designs that are not ordered: 90 days at most.
• Orders: as long as tax and accounting law requires, usually six years.
• Memory pages: for as long as the page exists. Owners can delete a page, and everything on it goes with it.
• Accounts: until you delete yours. Deletion starts at once and is final 30 days later; signing in within those 30 days cancels it.

Cookies

We use necessary cookies for language, sign-in, edit links and remembering photos. With your permission, Google Analytics uses cookies to measure visits to the shop. You can accept or reject analytics and change your choice using Cookie preferences. Google receives usage and device information. Stripe sets its own cookies on its payment page.

Your rights

You can ask to see, correct, delete or take a copy of your data, object to how we use it or ask us to limit it. Write to hola@mementivo.com and we will answer within a month. You can delete your account and your pages yourself from My account.

If you are not happy with our answer you can complain to a data protection authority: the ICO in the United Kingdom (ico.org.uk), or the one in your country (in Spain, the AEPD, aepd.es).

Changes

If we change this policy we will update the date at the top, and tell account holders by email if the change matters to them.