Privacy Policy
This page is a draft. We'll finish it before Pebble & Moss opens.
Pebble & Moss is a place to remember pets who have died. We collect as little as we can, we don't sell anything about you, and we don't show ads. This page says what we keep, why, who helps us run the site, and how to have things removed.
Who "we" are: Pebble & Moss is run by [legal name], [virtual mailbox street address], USA. Questions: hello@pebbleandmoss.com.
What we keep, and why
If you make an account
- Your email address and password (the password is stored scrambled, so we can't read it). To log you in and send you account emails.
- Your first name, if you give it. We use it to greet you, and visitors to your memorials see it (for example "Sam loved this").
- Settings and choices you make in your account, kept until you delete it.
What you put on a memorial
- The pet's name, type, dates, story, photos and captions, your pinned message, and your settings (theme, who can see it, whether notes wait for you first).
- Photos are resized when you upload them, and location and camera details are removed. We don't keep the original file.
If you leave a note
- The name you type, your message, and your photo if you add one. We don't ask for your email. A first name is fine.
- A scrambled (hashed) form of your internet address, and a scrambled form of a random token your browser keeps. We use these only to stop spam and abuse, for example to hold future notes from someone the owner asked us to hold. We don't keep your internet address itself.
If you light a candle or leave a flower
- A scrambled form of your internet address and of the random token your browser keeps, so each person counts once and bots can't flood the counts.
If you report something
- The reason you chose, a scrambled form of your internet address, and your email if you leave it, so we can tell you what we did.
- Requests about intimate images and copyright also include the name, contact details and signature you give us.
If you write to us
- Your email address and what you write. Our support address forwards to a Gmail inbox, and we reply from it.
If you tap "I'd buy this"
- If you tap "I'd buy this", we keep that you did, for which idea, and when, with your account. If we ever offer it, we'll email you once. That email has a link to stop it, and deleting your account deletes this too.
If you send us an idea
- If you send us an idea through the form on your account page, we keep your words with your account for a year so we can read them and reply. Deleting your account deletes them.
Email records
- A record of the emails we send, so we stay within our sending limits, and a list of addresses that bounced or marked our email as spam, so we stop sending to them.
When something goes wrong
- If the site hits an error, we log what failed, the page, a request number and the IDs of the things involved (for example the memorial). We never log passwords, cookies or full internet addresses. Error records are kept for 90 days, so the reference code we show you still works if you write to us.
How the site is used, in total
- We count things like "memorials published today" and "notes posted today" as daily totals, with no cookies and nothing linked to a person. We also count, for each day, how people arrive: the kind of link (a card, a search engine, a social site, a shared memorial link and the way it was shared), the first page they saw, phone or computer, and, once our own Cloudflare setup is live, the US state a connection appears to come from. For visits to the home page we keep only the referring site's name (for example "facebook.com"), never the full link. For our printed cards, we count which batch of cards a visit came from, never who. These are daily totals. We don't keep them with your account and we don't use them to follow anyone.
Who can see what
- Memorials shared by link ("Only people I share it with") can be seen by anyone who has the link. They aren't listed in the Memorial Garden, and search engines are asked not to show them.
- If you change a memorial to people with the link only, its photos move to new addresses, and the old ones stop working within an hour.
- Memorials in the Memorial Garden ("Everyone") can be seen by anyone and can appear in search engines. Notes on them can be read by anyone.
- Visitors' words and photos stay out of search results. We ask search engines not to quote notes or show visitors' photos, on every memorial. The pet's own photos can still appear.
- AI companies are asked not to train on memorials. AI search tools (the kind that find a page and link to it) may read public memorials, like search engines. We ask AI companies not to copy memorial pages to train their models. This is a request in our robots.txt file, which the major companies say they follow; we can't force every company to follow it.
- Under the note form, a line tells you who will see your note before you post it.
- The family can keep your note. A memorial's owner can print the memorial or download everything on it. Your note, name and photo may be in those.
Automated photo checks
Every photo, from owners and visitors, is sent to Google Cloud Vision SafeSearch to check for explicit or violent content before anyone else sees it. Google returns scores; we decide what to do with them.
When we share
We share information only when we must:
- Child sexual abuse material: we report it to the National Center for Missing & Exploited Children (NCMEC), with the related account details, as US law requires. NCMEC may pass it to law enforcement.
- Copyright: if someone sends a notice about something you posted, we tell you and may give you a copy of the notice. If you send a counter-notice, we forward it, with your name and contact details, to the person who complained. The law requires this.
- Legal orders: when a valid court order or similar legal demand requires it.
Who helps us run the site
We use these services. Each only gets what it needs to do its job.
| Service | What it does for us | What it handles |
|---|---|---|
| Render | Runs the website and the database | Everything stored in the database |
| Cloudflare | Stores photos and downloads (R2), delivers the site and photos, blocks bots (Turnstile), forwards our email, checks for child abuse material | Photos, files, internet addresses passing through |
| Google Cloud Vision | Checks photos for explicit or violent content | Each photo, at upload |
| Resend | Sends our emails | Your email address and the email's content |
| Google (Gmail) | Our support inbox, where we read and answer your emails | Emails you send us, and our replies |
| [Uptime monitor, e.g. UptimeRobot] | Checks the site is up | Nothing about you |
We don't sell or rent anything about you. We don't use advertising or tracking cookies.
Cookies and storage
No cookie banner. We store what the site needs, what you chose, and one short note of the kind of link that brought you here, with no ID.
| What | Where | Why |
|---|---|---|
| Login session | Cookie (__Secure-better-auth.session_token) |
Keeps you logged in |
| Visitor token | Cookie (fp_vt, kept up to 400 days) |
A random token we keep only in scrambled form. It helps stop spam and remembers that you lit a candle or left a flower |
| Where you came from | Cookie (fp_src) |
Which kind of link brought you here (for example "a vet's card" or "a search engine") and the first page you saw. We set it for anyone who isn't logged in, including people who only read a memorial. No ID: everyone who came the same way has the same one. Kept 30 days, or deleted once you make an account, when it's added to that day's count. |
| Your name for notes | Your browser (fp.visitor.name) |
Fills in your name next time, if you leave a note again |
| Unsent writing | Your browser (fp.kept) |
Keeps what you typed (a new memorial's first step, a story, a note) if the signal drops, until you save or post it |
| Turnstile | Cloudflare | Checks you're a person, not a bot |
How long we keep things
- While your account and memorials exist, we keep them. We never delete a memorial for being inactive.
- Deleted things (a photo, a note, a memorial, an account) can be restored for 30 days, then they're permanently deleted, along with their backup copies within a further 30 days.
- Database backups are kept for about 30 days, including the weekly copy we keep outside Cloudflare.
- Error records: 90 days.
- Email records: 90 days.
- Counts that stop spam and sign-in guessing: how many tries were made, kept against a scrambled form of your internet address or email address, or against your account or a memorial. Kept up to 31 days.
- Download files: the file "Download everything" makes can be opened for 24 hours, and is deleted from storage within 2 days.
- When the law requires it, we keep specific material longer. For example, if we report child sexual abuse material to the National Center for Missing & Exploited Children, US law requires us to keep it and related records securely for 1 year.
Your choices
- See and take everything: "Download everything" on any memorial gives you all its photos, the story and the notes.
- Change or delete: edit or delete anything on your memorials, or delete your account, from your settings.
- Emails: turn off note emails in a memorial's settings, or tap "Stop these emails" in any of them. Emails about your account's safety, reports on your memorials, and downloads you asked for still come.
- A note you left: visitors can't edit their own notes. Ask the memorial's owner, or write to us and we'll remove it.
- Anything else: write to hello@pebbleandmoss.com. We'll do what we can and tell you if something can't be done and why.
Children
Pebble & Moss isn't made for children under 13, and we don't knowingly collect their personal information. If we learn that a child under 13 left their name or photo, we remove it. If you're a parent and think this has happened, write to us.
Where your information is
Pebble & Moss is run from the United States, and our services store data in the US [confirm R2 region].
Changes
If we change this policy in a way that matters, we'll email owners and show a note on the site before it applies. The date at the top says when it last changed.
Contact
hello@pebbleandmoss.com · [virtual mailbox street address]