Privacy Policy

1. Scope

This policy covers the personal information we handle when you create, fill, share or open a Memory Deck, or contribute to one.

2. What we collect

We use a first-party country preference cookie (km_country) for up to one year to remember Canada/CAD or USA/USD. On your first visit, our hosting provider’s country signal suggests USA for a US location and Canada otherwise. Your selection overrides this suggestion. This cookie is used for pricing and shipping, not advertising; we do not store your IP address in it.

From creators: your email address, the recipient's first name and the occasion, and the photos, words and voice recordings you add.

From contributors: the name you sign with and what you add to a card.

Automatically: limited technical data needed to run and protect the service, including a hashed — not readable — form of IP addresses used to rate-limit access-code attempts.

Payment details are handled by Stripe. We receive confirmation and tax information, never your full card number.

3. How we use it

To create and run your deck, process your payment, send you transactional email (verification codes, receipts, notifications), print and ship a magnet if you buy one, and keep the service secure.

We do not use your gift content for advertising. Optional advertising measurement with Meta takes place only with your marketing consent, as explained below.

4. Where your data lives

We aim to store your deck's content in a Canadian region.

5. How long we keep it

We keep your deck and its content while your account is active and for a defined period afterward. The exact retention period is being finalized and will be stated here before launch.

You can ask us to delete your data sooner.

6. Your rights

You can ask to see the personal information we hold about you, correct it, delete it, or receive a copy in a portable format, and you can withdraw consent where our processing relies on it.

Contributors can ask us to remove what they added and to stop contacting them. To make any request, email contact@keepsakeme.ca.

7. How we protect it

Access to decks is controlled per account. Share links are unguessable secrets; access codes and session tokens are stored only in hashed or encrypted form; and photographs are served through short-lived signed links rather than public URLs.

8. Children

KeepsakeMe is intended for adults. It is not directed at children, and we do not knowingly collect personal information from them.

9. Privacy officer and contact

We have designated a person responsible for privacy at KeepsakeMe. Their name and title will be listed here before launch, as Quebec's Law 25 requires.

To reach them, or to make any request under this policy, email contact@keepsakeme.ca.

10. Changes to this policy

If we make a material change, we will update the date below and, where appropriate, notify you.

11. Optional Meta marketing measurement

On www.keepsakeme.com, you can accept or decline Marketing in Cookie settings. Neither browsing, essential cookies nor payment is treated as marketing consent. Earlier acknowledgements of our essential-cookie notice are not marketing consent. We also respect Global Privacy Control.

If you opt in, Meta receives visits to selected public and checkout pages, generic product-interest and checkout events, and confirmed purchase value, currency and an opaque order/event identifier. We use a random browser identifier and browser user-agent for attribution. Browser requests to Meta inherently disclose your IP address and browser information; we do not add your email, name, phone, address or payment-card details to these events.

Private gift and contribution routes (/d/* and /add/*), deck editors, and confirmation URLs are excluded. We never send gift photos, messages, recordings, recipient details, private links or URL query strings to Meta. We do not load Meta JavaScript or enable automatic advanced matching.

Confirmed purchases may be reported from our server after you close the browser, only where you consented before payment. Consent expires after 90 days. Use Cookie settings on a public page to withdraw at any time; this stops future browser events and suppresses pending server events once your withdrawal is saved. Previously delivered events cannot be recalled through this control. Blocking cookies may prevent consent from being saved, in which case tracking stays off.

Meta processes measurement data under its own privacy policy (https://www.facebook.com/privacy/policy/), potentially outside Canada. We retain the consent record and purchase delivery ledger to honor withdrawals and prevent duplicate reporting; contact us to request deletion. Declining marketing does not affect your ability to create, buy or share a keepsake.

12. Microsoft Clarity session replays

We use Microsoft Clarity session replays to improve the site. If you accept Analytics in our cookie choices, Clarity records masked page layouts, clicks, scrolling and navigation on selected public, designer and checkout pages at www.keepsakeme.com. We do not record visits when Analytics is declined, and marketing consent or making a payment does not grant analytics consent.

We explicitly mask personal content, inputs, messages, uploaded images, previews and voice-related content. Payment fields are inside Stripe frames and are not recorded. Private gift and contribution pages (/d/* and /add/*), private deck editors and reviews, private voice links, confirmation pages and admin pages are excluded. We remove query strings, fragments, referrers, private links and media URLs before uploading replay data. Replays show masked interactions, not the contents of your keepsakes.

Clarity receives browser/device information, interaction data and random session identifiers. Requests to Microsoft necessarily disclose your IP address. Microsoft may process this information outside Canada under its privacy statement (https://privacy.microsoft.com/privacystatement). We do not send customer identifiers to Clarity or grant it advertising-storage consent.

Analytics choices expire after 90 days. Use the same Cookie settings control on a public page to change your choices. Withdrawal stops future recording and queued uploads; it does not delete replays already received by Microsoft. Global Privacy Control disables recording. Blocking consent storage keeps recording off. Contact us about deletion requests. Declining Analytics does not affect creating, buying or sharing a keepsake.

13. Newsletter emails

When you submit our newsletter signup form, you ask KeepsakeMe to send a welcome offer, gift ideas and occasion reminders by email. This is separate from your cookie choices and is not required to buy a keepsake.

We store your email address, subscription status, signup source, consent timestamp, the version of the signup copy and your IP address as evidence of this request. Resend processes your address and email delivery data to deliver these messages. This may involve processing outside Canada.

Use the unsubscribe link in any marketing email to stop future marketing messages. We keep your subscription status and consent record after you unsubscribe so we can honor your choice and document consent. Contact contact@keepsakeme.ca for access or deletion requests.

Contact

Questions about this document? Email us at contact@keepsakeme.ca.