your memory text, display name, and any link you include - these become public, permanently, that is the product. your email address - used only for receipts, review outcomes, and "loaf reacted" notifications. basic technical logs (IP, user agent) for abuse prevention and rate limiting.
no selling of data, no ad tracking, no third-party analytics beyond aggregate counts, no marketing emails without asking first.
payments are processed by stripe. your card details never touch our servers.
you can request access to or deletion of your personal data (email, logs) at any time. note that accepted memory text and display names are public by design; legal erasure requests are honored where the law requires, as described in the terms.