Legal
Privacy Policy
Last updated: May 25, 2026
Charted Legacy (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your personal data when you use Charted Legacy (“the Service”).
1. Information We Collect
Account information. When you create an account, we collect your name and email address. This information is used to identify your account and communicate with you.
Memorial content. Information you enter into a memorial page — including names, dates, biographies, life story answers, and captions — is stored on our servers and made publicly accessible as part of the memorial page.
Photos and media. Images you upload are stored securely on Cloudflare R2, a cloud object storage service. YouTube video links you add are stored as URLs; the video content itself remains hosted on YouTube.
Tributes. Messages left by visitors on memorial pages (tributes) include the submitter's name and message. These are stored in our database and displayed publicly on the memorial page.
Serial numbers. If you register a physical plaque, the serial number and your account ID are stored to link the plaque to your memorial.
Usage data. We may collect basic usage information such as pages visited and actions taken within the Service for the purpose of improving Charted Legacy. This data is not sold or shared with third parties for advertising purposes.
2. How We Use Your Information
We use the information we collect to:
- Create and manage your account
- Display memorial pages to the public
- Link physical plaques to memorial pages via QR code
- Send transactional emails (account confirmation, password resets)
- Enforce plan limits (photos, videos, memorials)
- Respond to support requests
- Improve the Service over time
We do not sell your personal information. We do not use your data for targeted advertising.
3. Public Memorial Content
Memorial pages are publicly accessible by design — this is the core purpose of Charted Legacy. Any content you add to a memorial page (name, biography, photos, life story, tributes) can be viewed by anyone with the page URL or by scanning the associated QR plaque.
Please do not add information to a memorial that you do not wish to be publicly visible. You are responsible for ensuring you have the right to share any content — including photographs — that you upload to a memorial.
Tribute messages submitted by visitors are also public. As the memorial owner, you have the ability to delete any tribute from your memorial at any time.
4. How We Store Your Data
Your account data and memorial content are stored in a secure database provided by Supabase, a managed database platform. Photos and media files are stored in Cloudflare R2 object storage. Both services use encryption at rest and in transit.
Charted Legacy operates on a “Forever Hosting” model — our intention is to keep memorial pages accessible indefinitely. We take reasonable steps to ensure data durability and service continuity.
5. Sharing of Information
We do not sell, trade, or rent your personal information to third parties. We may share information only in the following limited circumstances:
- Service providers. We use Supabase (database and authentication) and Cloudflare (storage and delivery) to operate the Service. These providers process data on our behalf and are bound by their own privacy policies.
- Legal obligations. We may disclose information if required by law, court order, or government authority.
- Business transfers. In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify users of any such change.
6. Cookies & Tracking
Charted Legacy uses cookies and local storage to maintain your login session. These are strictly necessary for the Service to function and cannot be disabled while using the Service.
We do not use third-party advertising cookies or tracking pixels. We do not use Google Analytics or similar third-party analytics services that track users across websites.
7. Data Retention
Your account and all associated memorial content is retained for as long as your account remains active.
If you delete a memorial, all associated content — including uploaded photos — is permanently removed from our servers. If you request account deletion, all your data is permanently deleted within 30 days of our receiving the request.
Tribute messages left by visitors are retained as part of the memorial. If a memorial is deleted, all tributes associated with it are also deleted.
8. Your Rights
You have the right to:
- Access your data. Request a copy of the personal information we hold about you.
- Correct your data. Update your name or request corrections via the Settings page.
- Delete your data. Request deletion of your account and all associated data by contacting support.
- Withdraw consent. You may stop using the Service at any time. Discontinuing use does not automatically delete your data — a deletion request must be submitted.
To exercise any of these rights, please contact us at support@chartedlegacy.com.
9. Children's Privacy
Charted Legacy is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. Continued use of the Service after any changes constitutes your acceptance of the updated policy. For significant changes, we will notify users by email.
11. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
Charted Legacy
Email: support@chartedlegacy.com
This privacy policy is provided for informational purposes. Charted Legacy recommends consulting with a qualified attorney to ensure full compliance with applicable privacy laws in your jurisdiction, including GDPR, CCPA, and other relevant regulations, prior to commercial launch.