This page explains what personal data EveryStone collects, why we collect it, and how it's used. We collect as little as we can, and we never sell personal data. Memorial-care services, advertising and affiliate programs pay for the project. Section 3 explains what that means for your data.
1. What we collect
- Account data — when you register: email, display name (optional), and a hashed password. If you sign in with Google, Apple or Facebook, also the id that service gives your account.
- Contact form submissions — name, email, subject, message. We also record the IP address and a derived country code (e.g. UA, PL) for spam diagnostics, plus the User-Agent string of the device that submitted the form.
- Order data — when you buy a memorial-care service: email, optional cemetery / memorial reference, the order amount, and an opaque Stripe session ID. Card details never touch our servers — they go directly to Stripe.
- Contributions — the photos you upload, the GPS position and date your phone saved with each photo, and any grave details you enter or correct.
- Daily limits — which graves' exact locations and which full-size photos your account opened each day, so we can apply the limit of 20 of each a day. We delete these records after 7 days.
- Graves you viewed — while you are signed in, which grave pages your account opened, when, and how many times. Only you see this list, under "Recently viewed" on your account page, and you can clear it there at any time.
- Searches — what you search for, the number of results, your IP address, browser and browser language. We use them to improve search and to spot abuse.
- Cookies — a session cookie (PHPSESSID) for login state, and an optional remember-me cookie if you tick the box at sign-in. We set no analytics or advertising cookies today. If we add advertising that uses cookies, we will ask for your consent first and update this page.
2. Why we collect it
- To run the Service — login, contributions, order processing.
- To check new photos and read their inscriptions with AI, so each photo becomes a grave record (see section 3).
- To apply the daily limits on exact grave locations and full-size photos, so the archive can't be copied in bulk.
- To reply to your messages and confirm service requests.
- To detect and prevent spam, abuse and fraud (this is what the IP / country code / User-Agent are for on the contact form).
- To comply with legal obligations (e.g. retaining payment records).
3. Third-party services
- Stripe — payment processing for memorial-care services. Their privacy policy applies to the data you enter at checkout.
- MaxMind GeoLite2 — runs locally on our server to convert an IP address to a country code. No data leaves our infrastructure for this lookup.
- Hetzner — hosts the application and database in the European Union.
- Anthropic — the AI that checks each new photo shows a grave marker and reads the names and dates on the headstone. We send it the photo, never your name or account details. Anthropic doesn't use what we send to train its models.
- Ahrefs Web Analytics — counts page views and where visitors come from, without cookies.
- Google, Apple and Facebook sign-in — only if you choose to sign in with one of them. That service tells us your account id, your name and your email (Apple may give a private relay address instead). We use them only to sign you in, and the service learns that you signed in to EveryStone.
- SendKit — delivers our emails, such as account confirmations and replies to your messages.
- Advertising and affiliate partners — some pages may show ads, and some link to partners such as MyHeritage and Ancestry. When you follow a partner link, the partner learns that you came from EveryStone, and it may pay us a commission if you buy something. We don't pass your account details to advertisers or partners.
4. Public archive content
Memorial photographs and transcriptions are public by design — that's the point of the archive. They include names, dates and places of people who have died. If you are a relative and would prefer a specific record removed or corrected, see "Removal requests" in the Terms of Use.
5. Retention
- Account data — kept until you delete your account.
- Contact messages — kept for up to 24 months, then deleted unless flagged for legitimate reasons (e.g. ongoing correspondence).
- Orders — kept for the period required by tax / accounting law (typically 5-10 years depending on jurisdiction).
- Server logs (including IP addresses) — kept for up to 90 days for security purposes.
- Daily-limit records — deleted after 7 days.
6. Your rights (GDPR)
If you're in the EU/EEA or UK, you have the right to:
- Ask what data we hold about you
- Have it corrected or deleted
- Object to processing
- Request a portable copy
- Withdraw consent at any time
Email contact@everystone.co for any of these. We respond within 30 days.
7. Deleting your account
To delete your EveryStone account, email contact@everystone.co from the address you signed up with, or use the contact form, and ask us to delete it. We delete it within 30 days and confirm by email.
We delete your account details, your saved items and your links to Google, Apple or Facebook sign-in, along with anything those services shared with us. Photos and grave records you added stay in the public archive, as the Terms of Use allow, unless you ask us to remove them as well. We keep order records for as long as tax law requires.
You can also remove EveryStone's access on the sign-in service's side:
- Google — your Google Account, then Security, then "Your connections to third-party apps and services".
- Apple — on an iPhone, Settings, then your name, then Sign in with Apple. Or account.apple.com, under Sign in with Apple.
- Facebook — Settings and privacy, then Settings, then Apps and websites.
Removing access there stops further sign-ins with that service but doesn't delete your EveryStone account. Ask us for that.
8. Children
EveryStone isn't directed at children under 16. We don't knowingly collect data from children. If you believe a child has registered, contact us and we'll remove the account.
9. Security
Passwords are stored hashed with the algorithms recommended by Symfony (currently bcrypt or argon2). All traffic to the site is served over HTTPS. The database is hosted in the EU and access is restricted to a short list of system administrators.
10. Changes
If this policy changes in any material way we'll announce it on the homepage and email registered users. The date at the top of this page reflects the latest update.
11. Contact
Questions, complaints or data requests: contact form or contact@everystone.co.