Privacy notice
Draft. We wrote this page to match what Mementofoto does, but a lawyer has not reviewed it yet.
Who is responsible
This website is run by [PLACEHOLDER: controller name and address], who is responsible for your personal data here. You can write to us at [PLACEHOLDER: contact email].
Hosting and server logs
This site and the waitlist run on Cloudflare. Cloudflare keeps server logs: your IP address, the time, the page you asked for and your browser type. These logs are needed to run the site and keep it secure, which is our legitimate interest under Article 6(1)(f) GDPR. They are kept for [PLACEHOLDER: log retention].
Transfers outside the EU
Cloudflare and the companies it works with may process data outside the European Economic Area. Cloudflare’s data processing agreement includes the EU Standard Contractual Clauses, and Cloudflare says it complies with the EU–US Data Privacy Framework. PostHog Cloud EU keeps the analytics data on servers in Frankfurt. [PLACEHOLDER: confirm that our data processing agreements with Cloudflare and PostHog are in force]
Photos
This site doesn’t ask you for any photos yet.
Cookies and analytics
This site sets no cookies. If you allow analytics, we send page visits, button clicks and whether a waitlist signup succeeded to PostHog Cloud EU in Frankfurt to improve the site. We send the page language and a random code that links events during the same visit. We do not send your name, email address, occasion, or what you type. We set a three-month retention period. PostHog deletes older events during its monthly cleanup. We save only your analytics choice in your browser. Analytics rely on your consent (Article 6(1)(a) GDPR). You can withdraw it at any time under Analytics preferences at the bottom of the page.
Daily website totals
We count page requests and new waitlist registrations by language to understand how much interest there is in Mementofoto. Cloudflare sends only the daily totals to PostHog Cloud EU. These totals contain no names, email addresses, IP addresses or visitor identifiers. They include activity regardless of your optional analytics choice.
What you type
On the order page you give us your full name, your email address and the occasion. We save them when you press Continue. Nothing else you type on this site is sent to us.
The waitlist
For the waitlist we save your name, email address, the occasion you chose, the language of the page and the time, in a Cloudflare D1 database. We asked Cloudflare to keep it in Western Europe; Cloudflare treats this as a preference, not a promise. We use these details only to email you when Mementofoto opens. The legal basis is your consent (Article 6(1)(a) GDPR), which you give by pressing Continue. You can withdraw it at any time by writing to us at [PLACEHOLDER: contact email], and we will delete your entry. Otherwise we keep it until [PLACEHOLDER: retention period].
When Mementofoto opens
Mementofoto is not open yet. When it opens, you will sign in with a code we email to you, upload photos and pay through Stripe. We will then hold more: your account, your photos and the film made from them, and your order. Some of the companies that will help us make the films are in the United States. Before we open, this page will say what we keep, who else handles it, where, and for how long.
Your rights
You have the right to see the personal data we hold about you, to have it corrected or erased, to restrict or object to how we use it, and to receive it in a form you can take elsewhere. You can also complain to a data protection authority. In Ireland, that is the Data Protection Commission. In other countries, it is the authority where you live. To use any of these rights, write to us at [PLACEHOLDER: contact email].
Last updated: 10 November 2026