What we hold, and what we deliberately do not.

What we collect

• Your account. An email address, a display name, and a password we only ever store as a hash.
• Your memories. The title, whatever you wrote, the photos, video and voice notes you attached, and the place you chose.
• Unlock records. That a memory opened, when, and roughly how far away the person was. Not their coordinates.
• Device tokens. If you turn notifications on, an address to deliver them to. It is never read back out of the app.
• Site analytics. On this website, a random token in a cookie so we can tell one visit from another, the page you looked at, and where you arrived from.

What we refuse to collect

• Your movements. Location is read only while you are actively checking a memory. There is no background tracking in the app at all.
• Where you have been. An unlock is stored as a distance and an accuracy. The columns for latitude and longitude do not exist on that table.
• Photo metadata. A photo taken at a place carries GPS coordinates in its EXIF. We strip that before the file is stored, not when it is served.
• Your address book. We never ask for your contacts, and there is no way to look somebody up by name or email.

Who can see your memories

A memory is private until you decide otherwise. When you do share one, the decision is enforced on our side rather than by the app hiding a button — a memory you have not earned is not sent to your phone at all, and its coordinates are stripped from the response before it leaves us.

If you mark a place hidden, we send no coordinates, no place name and not even the size of the unlock circle to anybody but you. A circle on its own narrows a place down, which is why it is withheld too.

Where things are stored

Photos, video and voice notes live on private storage and are never reachable by a public URL. Every file is served through a route that checks who you are and whether the memory has opened for you, so guessing a filename gets you nothing.

Email

We write to you for account things — verifying your address, resetting a password — and, if you asked for it, an occasional newsletter. Every newsletter carries a working unsubscribe link, and unsubscribing keeps your address on file precisely so that nothing puts you back on the list later.

Your choices

• Delete a memory. It goes, and so do its files — including the thumbnails.
• Revoke a link. One tap, and the link stops working for everybody who has it.
• Delete your account. Write to us and we will remove it.
• Turn notifications off. In the app, or in your phone's settings. Signing out unregisters the device first.

Cookies on this site

Two: one that keeps your session working, and one holding a random value we issued so two page views from the same visit are not counted as two people. Neither is sold, shared, or joined to anything from another website. There is no third-party tracker on this page.

Getting in touch

Questions about any of this go to hello@placedmemories.app, or through the contact form. A person reads them.