Last updated: July 16, 2026
The short version
The program you build — the photo, the obituary, every name — stays on your device. The builder and the PDF export run entirely in your browser; nothing you enter is uploaded to, stored on, or readable by our servers. The only personal information we ever hold is an email address you explicitly choose to give us.
The program builder
All layout and PDF generation happen locally in your browser. Your in-progress program is autosaved to your own browser’s local storage so a refresh doesn’t lose your work; that autosave never leaves your device and is cleared when you clear browser data. Uploaded photos are processed on your device only.
Email addresses
If you use the optional “email yourself the details” feature, the contact form, or the Pro waiting list, we store the address you provide, the date, and which page it came from — used only to respond, to notify you about Pro if you asked, or to share occasional genuinely useful resources. No selling, no sharing, and every email includes an unsubscribe honored immediately. Program details sent by email go through your own mail app, not our servers.
Analytics
We record anonymous, aggregate events (for example, “a PDF was exported”) to understand which features help. They contain no program content and no personal details. No advertising trackers.
Cookies and local storage
Local storage holds your program autosave and your Pro status; session storage prevents repeated prompts. We set no advertising cookies.
Third parties
Hosting by Vercel; email addresses stored with Supabase. Both act as processors on our behalf. Program content never reaches either — it stays in your browser.
Questions or removal requests
Use any unsubscribe link, or reach us via the contact page, and we’ll delete your address promptly.