Suas Memórias
How your data helps bring memories together and how we look after it.
Version 2026-10-14.3 · Updated October 14, 2026
We’re here if you need us.
oi@josepholiveira.devThe controller responsible for personal data in the operation of Suas Memórias is JOSEPH VALENTE OLIVEIRA DE PAULA. Contact oi@josepholiveira.dev for questions or requests under Brazil’s General Personal Data Protection Law (LGPD). This policy covers hosts, buyers and guests.
Account and access: name, email, email confirmation, a hashed password when set, sessions and technical authentication records. A new checkout account can be created without a password; account confirmation and password setup happen through email.
Co-organizer invitations: the email provided by the owner, album, expiry, acceptance and recipient account. These records deliver the invitation and control access; they are not used for marketing. Provide only the address of someone who expects your invitation.
Albums and memories: celebration title and date, notes, design preferences, guest name, photos, videos and file technical information. Optimized photos are exported by the browser without camera file metadata. When original storage is enabled with Complete, the uploaded source is also saved and may contain metadata such as location and camera details. Anyone with the album link can download it. This is explained before upload. Legacy files may also contain metadata.
Purchases: plan, amounts, discount, payment status, transaction reference, and terms acceptance version and time. Payment information such as name, email, CPF/CNPJ, phone and address, when required, is sent to ValidaPay. The app database does not store the CPF/CNPJ or address collected for that payment, or complete card numbers or security codes.
Operations and security: information needed to prevent abuse and diagnose failures, including IP addresses, browser details, timestamps and technical records. Cookies maintain sessions and access permissions; browser storage keeps the album draft. Transactional messages use the email address and details necessary for confirmations and access instructions.
Data supports accounts and albums, uploads and delivery, purchases, access confirmation, password recovery and support. These uses relate to performing the contract and requested steps before purchase.
At checkout, the provided email, selected plan, purchase stage and activity timestamps support the steps requested by the buyer. These records are not an advertising list and do not activate abandoned-cart emails. Optional browsing statistics depend on your choice to accept or decline; declining does not prevent service use.
We separately measure public-page audience and performance to understand the service’s reach. This limited measurement produces aggregate statistics without analytics cookies, persistent identifiers or links to accounts and purchases. We use the specific purpose of audience measurement with minimization and transparency safeguards, considering our legitimate interest and individuals’ rights.
Data also supports legal obligations, the exercise of rights and prevention of fraud and abuse. Security processing based on legitimate interest must respect necessity and individual rights. If a purpose requires consent, it must be specific and revocable. Accepting the terms does not grant blanket permission for any use of personal data.
We do not sell personal data or use memories for advertising or AI training. We do not perform facial recognition to identify guests.
Authorized administrators may inspect memories to investigate reports and abuse and enforce the terms. Access is authenticated and logged and does not make files public. We do not promise advance review of every upload, without overriding statutory prevention and response duties. We process only the data needed to assess reports, record blocking decisions and meet legal obligations. Guest names and shared memories are accessible to anyone with the album link or QR code during its access window, including people who receive a forwarded invitation. The host can manage the album and remove memories. Downloaded copies are outside the service’s control.
We use Vercel for hosting, Neon for the database, Cloudflare R2 for files, Cloudflare Web Analytics for public audience measurement, Resend for emails, ValidaPay for payments and PostHog for optional usage statistics and failure diagnostics. These providers receive the data needed for their functions. Data may also be shared where required by law or a valid authority order.
Cloudflare Web Analytics receives technical data about visits to public pages, including page paths, traffic sources, approximate country, device category, browser and performance. It processes connection information to produce aggregate statistics without following people across visits using persistent identifiers. This measurement is not installed on account, checkout, administration or guest-album pages. Our integration does not send names, emails, form contents, photos, videos, album access codes or file access links.
When you accept browsing statistics, PostHog receives a random browser identifier, page types without album codes, device and browser categories, general traffic sources, campaign labels and actions such as clicks, selected plans, checkout stages and completed upload counts. Purchase confirmation may include the plan, payment method and amount without payer details. We do not send names, emails, photos, videos, messages, card details, identity documents, access codes or file links. These identifiers are pseudonyms, not irreversible anonymization. The integration does not record the screen or automatically collect form contents. Failure logs sent to PostHog use fixed messages without request contents.
Provider infrastructure may process data outside Brazil. International transfers are subject to LGPD requirements and applicable regulations. You can request information about providers and processing through the contact in this policy.
Files remain in private storage, without a public service gallery, and use temporary access links. We use production HTTPS, session and authorization controls, request limits, upload verification and password hashing. Confirmation codes and links expire.
Anyone holding a temporary link may use it while it remains valid. Private storage cannot prevent forwarded invitations or downloaded copies. No measure guarantees absolute security. Incidents posing relevant risk or harm will be reported to affected individuals and ANPD when required by law.
Pending invitations are removed after their 7-day window during cleanup. The owner can cancel invitations or remove access earlier. Team records are removed when the album is deleted or expires; account deletion also removes shared access.
Access to memories ends at the close of the corresponding day 3 calendar months after the celebration date, in Brasília time. If that day does not exist in the destination month, its last day applies. Uploads close earlier, at the end of the 7th day after the celebration. Originals, versions and thumbnails are permanently deleted in cleanup runs after the access deadline; failures may require retries. Deletion from service storage does not remove copies already downloaded by participants.
Account data remains while needed to use the service. Purchase, acceptance, support and security records may remain as needed for their purpose, legal obligations and the exercise of rights. Email delivery records are removed after 30 days. Request deletion in “My account” with email confirmation, or through support if you cannot access the account. We remove profile and guest data and delete all album files; technical manifests remain only until physical removal is confirmed, with retries after failures. Minimal purchase-linked records remain under restricted access for the stated legal purposes, without using the deleted profile for advertising.
Anonymous global photo and video upload totals remain for statistics and marketing. They contain no person, account, album or file identifiers and cannot reconstruct or access content. File deletion does not reduce these totals.
Aggregate public audience statistics are available in Cloudflare Web Analytics for up to 6 months. They are not linked to account data or album memories.
Checkout records, including an email provided before account creation, remain while needed for purchase continuity and related support. They have no automatic fixed expiry; authorized administrators review necessity and can delete them manually. Data that is no longer necessary is deleted or anonymized, subject to statutory retention exceptions. Access is restricted. Contact us to request deletion. The temporary database link between a purchase and browser statistics is removed after 30 days. Necessary account and purchase records follow their separate purposes above.
App deletion cannot retrieve copies downloaded by others. Legally retained provider records and backups follow their retention periods and controls; contact support for information.
Under the LGPD, you can request confirmation of processing, access, correction, anonymization, blocking or deletion where legally applicable; portability under applicable regulations; information on sharing; and objection where applicable. When processing depends on consent, you can request information on providing it and withdraw it.
Send requests to oi@josepholiveira.dev. We may request proportionate information to confirm your identity and prevent unauthorized disclosure. Statutory response deadlines apply. You can also contact ANPD or consumer protection authorities where applicable.
Memories may depict children and adolescents. Hosts and uploaders must respect their best interests and obtain legally required authorizations. Do not expose sensitive information about minors through an album. Contact us if you identify inappropriate processing so we can review it and take appropriate measures.
This policy may change to reflect the service or legislation, with an updated version and date. Relevant changes in purposes or rights will be communicated appropriately. Contact us for clarification or assistance.
When you open a referral link, a signed first-party cookie remembers the first referrer for up to 30 days. It attaches the referral only when a new account is created after opening the link, including through checkout; signing in to an existing account does not qualify. The cookie is removed after attribution. It contains the referrer's account identifier, issue date and expiry, without the referred person's email or third-party advertising identifiers. Invalid or self-referrals are ignored, and an existing attribution is not replaced.
We store the account-to-account relationship, its date and reward records to calculate and deliver the referral benefit and prevent abuse. Your existing account email identifies the account; we do not create a separate list of email addresses entered by referrers. The referrer can see a partially masked email, qualifying purchase counts and validation dates. They cannot access your albums, files, payment details or purchase amounts through this program.
These records support the requested referral program and its rewards. The relationship remains while needed to attribute purchases and administer valid benefits; after account deletion, profile data is anonymized through the normal deletion process and only minimal reward and purchase-linked records remain under restricted access where necessary to settle benefits, prevent fraud or exercise rights. Optional PostHog measurements continue to follow your analytics preference and never receive referral links, codes, account identifiers or emails. Contact support to exercise your data rights or question an attribution.
Official references