Privacy Policy
Last updated: 31 August 2026
This page explains what we do with the information you give us. We have tried to write it the way we would explain it to you in person.
Two things first, because they are the ones people actually worry about.
What you write on a memorial page is not used for advertising, and it is never sold. Not the stories, not the photographs, not the recordings, not the names. We do not build advertising profiles from grief.
You can take everything with you, and you can delete it. There is a button that gives you a ZIP file with every word, photograph and recording on your page. There is another that deletes the page. Both are described below.
Who is responsible for your data
Stella Memoria is operated by ALTA NOTA S.R.L., a company registered in Romania — company number J2026055297002, tax identification number (CUI) 55616505. We are the data controller for the information described here. Our full company details are on the Legal notice page.
You can reach us at forever@stellamemoria.com. A person reads that address.
What we collect, and why
When you create a memorial page
You give us information about someone who died, and about yourself. Depending on what you choose to fill in, that includes: the person's full name, dates of birth and death, their home town, photographs, a voice recording, and the things you write about them — the stories, the phrases they used, what they loved, what they taught you. It can also include a religious tradition and dates that matter to your family, if you tell us, so that we know when to write to you.
We also store the email address you use as the owner of the page, the language you are reading in, and your time zone.
We hold this because you asked us to hold it — it is the entire service. In legal terms, we process it to perform our contract with you.
Some of this is sensitive: a religious tradition says something about belief, and a voice recording is a recording of a real person. We only ever store these because you chose to enter them, and we treat that as your explicit consent. You can remove them at any time.
When you contribute to someone else's page
If you add a memory or a photograph, we store what you wrote, the name you signed with, your relationship to the person, and — if you gave one — your email address, so that the family can reach you. If you light a candle, leave flowers or leave a prayer, we store only the name you give (optional) and your short message (optional; a prayer carries no message of your own). For candles and tributes we also store a one-way hash of your IP address. We keep no readable IP; the hash exists to stop the same visitor from lighting a thousand candles in a minute.
Contributions go to the family for approval before they appear. That is a moderation step, not a judgement of you.
When you pay
Payments are handled by our payment provider. We never see or store your card number. What we keep is the email address used at checkout, the amount, the currency, the date, and the payment provider's own reference numbers, so that we can answer questions about your purchase, issue refunds, and meet our accounting obligations.
When you visit the site
Our first-party cookies remember partner attribution for 90 days if you arrived through a partner, keep you signed in, and recognise the pages you own. We also use local and session storage for your cookie choice, your sign-in session, a form you have not finished, your partner gifts and limited visit attribution.
We use audience measurement, summarised below and set out in full in the Cookie Policy.
When we email you
We keep a record of the letters we send you — which kind, when, and whether the email provider accepted them — so that we can tell whether a letter reached you when you say it did not. For sign-in emails, the address in that log is masked and hashed, not stored in readable form.
Where your page lives, and who else sees the data
Your memorial page and its files are stored in our database and private file storage, run for us by a database provider and a file storage provider.
The following companies process some of your data on our behalf, each for one job:
| Who | What they get | What for |
|---|---|---|
| Database and sign-in provider | Everything on your page, your account | Database and sign-in |
| File storage and delivery provider | Uploaded files, web requests, IP address at the edge | Private file storage and delivery |
| Payment provider | Your email, the amount, our reference for the page | Taking payment, refunds |
| Email delivery provider | Your email address and the content of the letter | Sending our emails |
| Hosting provider | Web requests, sign-in emails | Hosting the site and operating its cloud services |
| Voice-generation provider | The voice recording and text, if you buy the voice add-on | Producing the recording — the voice model is deleted immediately after |
| Voice-generation provider | Documentary narration: the narrator's voice recording and the copy of the voice made from it | Processed only to read that film's text — deleted 30 days after the final film is ready |
| Image-processing provider | The photograph, if you buy photo restoration or animation | Restoring and producing the animation |
| AI text-matching provider | Photographs and text selected for automated analysis | Matching memorial text and photographs and preparing keepsakes |
| Film-production cloud provider | The material selected for a film | Producing films |
| Error-monitoring provider | Scrubbed technical error information, with names, emails, media addresses, tokens and query strings removed | Finding and repairing faults |
| Analytics provider | See the cookies section — never page content | Measuring how the public site is used |
| Cookieless measurement provider | See the cookies section — never page content | Cookieless measurement on selected public pages |
| Advertising provider | Nothing at present | Advertising measurement and purchase reporting are not used at the moment |
We give you the names of these providers on request: write to forever@stellamemoria.com.
Some of these companies are based outside the European Union. Where that is the case, transfers are covered by the European Commission's Standard Contractual Clauses or an equivalent safeguard. For visitors in the United Kingdom, transfers out of the UK are covered by the UK Addendum to those clauses or an equivalent safeguard.
No one else sees what you write. We do not sell data, we do not share memorial content with advertisers, and we do not use what is on a memorial page to target anything at anyone.
Cookies and measurement
The first time you arrive from the European Union, the EEA or the United Kingdom, you are asked whether to accept cookies. Here is what that question actually controls. The Cookie Policy lists every cookie and tool by name.
If you accept, we load Google Analytics, which counts visitors and shows which public pages people read. Outside the EU, EEA and UK, Google Analytics loads directly unless you have already declined.
Microsoft Clarity runs without cookies on a small allow-list of public marketing and guide pages. All text is masked before it leaves your browser — we see the shape of the page and where you clicked, never what you wrote. It does not depend on accepting cookies.
If you decline, Google Analytics does not load. Declining is one click, in the same place as accepting, and you can change your answer later.
Neither tool ever loads on the pages that matter: memorial pages, the writing screens, the contribution form, your account and page settings. Those routes carry no third-party analytics scripts at all, whatever you answered. This is deliberate. What you write about your mother is not measured.
The Meta pixel and Meta purchase reporting are not used at the moment.
How long we keep things
Your memorial page stays online. You pay once, and it remains. There is no expiry date and no renewal that can take it away.
Everything else has a limit:
- An unfinished page you never paid for is deleted after 90 days. We send one email before that, in case you want to come back to it.
- A candle stays on the page permanently. It holds the name you give (if any), your message if you write one, the date, and a scrambled, one-way form of your IP address that we use only to prevent abuse. The page owner can remove any candle, and you can ask us to remove yours at forever@stellamemoria.com.
- A ZIP export is first confirmed with a code we email you, which works once, for fifteen minutes. The download link then works for 24 hours, and the file itself is deleted automatically 24 hours after it was made.
- A page you delete is removed after 7 days. During those seven days you can undo it with a link we email you — because people delete things on bad nights.
- The remembrance letters are a separate, optional subscription (€19 a year). If it lapses, the letters stop; the page does not change.
- Payment records are kept as long as tax and accounting law requires.
- A documentary narrator's voice recording and the copy of the voice made from it are deleted 30 days after the final film is ready.
- Technical logs — which emails went out, which jobs ran, which errors occurred — are kept 24 months, and then deleted automatically.
What you can do
You have the following rights over your data. Most of them are buttons on the site rather than requests you have to make to us.
See it and take it. From your page settings, you can download a ZIP containing every text, photograph, recording, contribution and tribute on your page. No request, no waiting.
Correct it. Anything you wrote, you can edit.
Hide it. You can take a page offline without deleting anything. Anyone who opens the link then sees only that the page is no longer available — no name, no photo, no text — and search engines are told it is gone. You can put it back at any time, free of charge.
Delete it. You can delete a page, or your whole account, from page settings. Deletion happens after seven days, and you can cancel it during those days.
Stop the letters. Every letter we send has a link to change how often they come, or to stop them entirely.
Object, restrict, or complain. You can ask us to stop processing your data in certain ways, and you can complain to a data protection authority if you think we have handled your information badly. We would rather you wrote to us first, but that right does not depend on us.
You can complain to the authority in the country where you live, or to ours, which is the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul General Gheorghe Magheru 28–30, Sector 1, Bucharest, Romania — dataprotection.ro.
If you are in the United Kingdom, the UK GDPR gives you the same rights, and your authority is the Information Commissioner's Office (ICO) — ico.org.uk.
To use any right that is not a button, write to forever@stellamemoria.com. We answer as fast as we can with our small team, and always within one month.
If you contributed a memory to someone else's page and want it removed, write to us and we will remove it. The page belongs to the family, but your words belong to you. If what you want removed is not yours but something published about you, use the Report content page.
Children
Stella Memoria is not intended for children. You must be at least 16 years old to create a page or make a payment. Children can, of course, appear in the memories that families write; that is different from them being our users.
Security
Access to a memorial page is controlled by sign-in links and tokens sent to your email address. Files are stored with access controls, and export links are signed and expire after 24 hours.
We are a small operation. That means fewer people can see your data — but it also means we are honest that no system is perfect. If something goes wrong that affects your information, we will tell you, and we will tell the relevant authority, as the law requires.
Changes
If we change this policy in a way that matters, we will change the date at the top and, where the change is significant, tell you by email. We will not quietly start doing something with your data that this page says we do not do.
Contact
ALTA NOTA S.R.L. — CUI 55616505, Trade Register number J2026055297002, forever@stellamemoria.com