Your privacy

Privacy policy

Last updated August 31, 2026

This policy explains how Memento House handles personal information when people browse our site, create an account, purchase or customize a keepsake, contribute to a shared experience, or contact us.

Who we are

Memento House is operated from Cincinnati, Ohio, United States. For privacy questions, rights requests, or the operator’s current postal contact address, email jonahnr@gmail.com.

Scope

This policy applies to mementohouse.com, customer accounts, Memento Map and Timeline experiences, customization studios, questionnaires, proof review, order fulfillment, and guest contribution forms. Third-party sites reached from our service have their own policies.

Information couples and customers provide

This can include names, email address, account details, celebration date and venue, shipping and billing details, couple story information, map locations, relationship words, prompts, customization choices, questionnaire responses, proof feedback, messages, and uploaded photos.

Information guests provide

Guests may provide a display name, origin, recommendation, memory, date, location, written message, reaction, or optional photo. A guest account is not normally required. Guests should not submit sensitive information or content they do not have permission to share.

Information collected automatically

We and our providers may process IP address, device and browser information, timestamps, requested pages, referral information, session identifiers, security signals, diagnostic logs, and checkout or email delivery events to operate and protect the service.

Purposes and lawful bases

PurposeInformationBasis where applicable

Provide accounts, purchases, personalization, maps, proofs, and fulfillmentAccount, order, customization, location, and content dataContract or requested pre-contract steps

Protect guests, customers, and the serviceTechnical, submission, and security recordsLegitimate interests and legal obligations

Send transactional communicationsEmail, order, proof, and shipping dataContract and legitimate interests

Optional marketing or analyticsContact and usage informationConsent where required; otherwise legitimate interests with controls

Accounting, disputes, and complianceOrder, payment, communication, and audit recordsLegal obligations and legitimate interests

Payment processing

Stripe processes card and payment information. Memento House does not store complete payment-card details. Stripe may process billing information, fraud signals, and transaction records under its own privacy terms.

Hosting, database, storage, and subprocessors

We use Vercel for hosting and application delivery, Supabase for authentication, database, and file storage, Stripe for payments, Resend for transactional email, and Google Maps Platform for place search. Address text entered into place-search fields is processed under the Google Privacy Policy. These providers process information as needed to provide their services, subject to their agreements and applicable law.

Map visibility and sharing

Couples receive a unique guest link and QR code. Anyone with that link may be able to view information the couple has chosen to share and submit a contribution while submissions are open. Treat the link as shareable rather than secret. Couples can manage visible content and request removal of unwanted submissions.

Cookies and analytics

Essential browser storage keeps sessions active, preserves customization progress, limits repeated reactions, and supports security. If non-essential analytics or advertising tools are introduced, we will provide notice and consent controls where required.

International transfers

Our providers may process information in the United States and other countries. Where law requires it, transfers use recognized safeguards such as contractual protections or an applicable adequacy mechanism.

Retention

We retain account and digital-keepsake information while the account or experience is active; guest contributions while the related experience is active or until removed; customization, proof, fulfillment, and support records as needed to complete and support an order; security logs for a limited diagnostic and abuse-prevention period; and transaction records for required tax, accounting, chargeback, and legal periods. Some transaction records may remain after a deletion request where required.

Security

We use access controls, authenticated customer and administrative areas, encrypted network connections, signed file links, provider security controls, and abuse-prevention measures. No online system is risk-free, so use a unique password and share guest links thoughtfully.

Your choices and rights

Depending on where you live, you may ask to access, correct, delete, restrict, or receive a copy of personal information; object to certain processing; withdraw consent; close an account; or appeal a privacy decision. Couples can request removal of a guest contribution. We may verify identity before acting.

EU and EEA rights

People in the European Economic Area may have the rights described above, including the right to object to legitimate-interest processing and lodge a complaint with their local data-protection supervisory authority.

California rights

California residents may request categories and specific pieces of information, sources, purposes, and disclosures, and may request correction or deletion subject to exceptions. We do not sell personal information for money. If our practices constitute “sharing” for cross-context behavioral advertising, we will provide the required choice.

Children and minors

The service is intended for adults and is not directed to children under 13. Do not intentionally submit a child’s personal information without authority from a parent or guardian. Contact us to request removal.

Deletion and account closure

Email us from the account or order email and describe what should be closed or removed. Closing an account may make purchased digital experiences unavailable. We will explain any information that must be retained.

Changes, contact, and complaints

We may update this policy as products and legal requirements evolve. Material changes will be communicated when appropriate. Contact us with concerns; where applicable, you may also complain to the privacy or data-protection authority in your jurisdiction.