Privacy Policy

What we collect

When you have an account on this site, we keep:

• Account info: your email address, the display name you choose, and how you’re related to the family.
• What you upload: photos, videos, written stories, message-board posts, and comments.
• Basic usage data: your IP address (used to spot obvious abuse) and the time you last signed in.

What we don’t do

No ads. We don’t sell anything about you, and we don’t share family content with anyone outside the family. The handful of services we use to run the site (listed below) only see what they need to do their job — database, storage, email, hosting, analytics, and error monitoring. We use a privacy-conscious analytics tool to understand how the site is used, described in its own section below.

Where your data lives

The site itself is small, but the data sits with a few well-known services so we don’t have to run our own servers:

• Supabase — the database and the sign-in system. Hosted in the United States.
• Amazon S3 — where photos and videos are stored. Hosted in the United States.
• Vercel — runs the website and serves the pages.
• Resend — sends the emails the site needs to send (sign-in links, invite emails, that sort of thing). Hosted in the United States.
• PostHog — product analytics so we can see which pages and features actually get used. Hosted in the United States. Details in the next section.
• Sentry — error monitoring so we find out when something breaks. Hosted in the United States.

Analytics & error monitoring

We use two tools that watch how the site behaves so we can keep it working and decide where to spend effort. Both are configured to be as quiet as possible.

PostHog (product analytics). Records which pages you visit and which buttons you click. It identifies you by an internal id only — never your name, email, or anything you typed. It does not record your screen or play back your sessions. PostHog stores a small token in your browser’s localStorage so your activity can be grouped across visits. If your browser sends a “Do Not Track” signal, PostHog respects it and stays off.

Sentry (error monitoring). When the site throws an error, Sentry collects the error message, the technical stack trace, and the page you were on so we can fix it. It captures browser and operating-system context but is not told who you are.

How we keep it safe

• You can’t see anything beyond the home page without signing in.
• Every database query is checked against your membership status, so a pending or suspended account can’t poke around.
• Photos and videos are stored with restricted-access keys — the site mints a short-lived link only after it confirms you’re allowed to see the file.
• If something goes sideways, an admin can suspend accounts immediately.

Your options

If you want a copy of your data, or you want your account and uploads deleted, just ask. Email awoelke@gmail.com and an admin will take care of it. We don’t make you fill out a form for that.

If photos of you exist on the site and you’d rather they didn’t, tell the admin and we’ll remove them.

Children

The site is intended for adult family members. Kids may appear in photos and stories, but they shouldn’t have their own accounts. If a child accidentally got an account, a parent or the admin can have it removed.

Changes to this policy

If anything important here changes, we’ll note it in the site footer or send a short email so you know what’s different. The “last updated” date at the bottom of the page tells you when this was last revised.

Contact

Questions, concerns, or requests — email awoelke@gmail.com. This is a family project, so a real person will answer.