Privacy

Our Witness Tree is a private memory book that a family keeps together — usually about a child, a grandparent, a couple or a friend. That means we hold photos and stories about people you love, so here is exactly what happens to them.

What we store

• The book itself: the person's name, a special date, a little emoji, the book's web address, and the colours and fonts you chose.
• Memories: the words, the date, who posted it, any comments, and any photos, video or voice notes you add. If you add a place, we keep the name and the map coordinates.
• Passcodes: we keep a scrambled one-way version of each passcode, never the passcode itself, so nobody — including us — can read it back.
• Accounts: only the person who creates a book has an account (email and password, or Google). Family members who just post never need an account; we remember the name they typed on their own device.

Who can see a book

Only someone with the book's code and its passcode. Nothing inside a book is public, and we ask search engines not to list book pages. Strangers who visit our front page see only the front page.

Photos of children

Books are often about small children who can't yet say yes or no. The person who created the book decides who joins and what gets posted, and can remove anything at any time. We never sell photos, never show them to other books, never use them in advertising, and never train AI models on them.

Where it lives, and who else sees it

• The database and the photo files are hosted by Lovable Cloud (built on Supabase) on servers in the European Union.
• Google delivers our fonts and, on a book's map page, the map itself — so Google sees those requests like it would on most websites.
• On our public front page only, Lovable's visitor counting records which pages were visited, where visitors came from, their country, browser, device, how long they stayed, how fast pages loaded, errors, and which buttons and links were clicked. It uses no cookies, stores nothing on the visitor's device, does not keep IP addresses and cannot identify anyone. Detailed data is kept for 90 days, daily summaries for a year. Lovable collects this for us; Lovable's privacy policy explains how they handle it. This counting does not run inside a family's book.

Your control

• The book's creator can delete the whole book — every memory and photo with it — from the book's settings page, and can change the passcodes whenever they like.
• Anyone who posted a memory can edit it, and an editor can restore or remove deleted memories.
• Want an account and everything it owns removed? Email us and we'll do it for you — including photos we hold for that account.

How long we keep things

Until the creator deletes them, or asks us to. If a book is abandoned we may contact the creator before removing anything.

Security

Everything travels over HTTPS. Passcodes are stored as one-way hashes. Photos are only reachable through short-lived signed links, so a guessed web address won't open somebody's memory.

Talk to us

Questions, or a request to delete something: support@ourwitnesstree.com. This page is our plain-language promise, not legal advice — if you use a book for anything serious, have someone who knows the rules where you live check it.