What we keep, where, and why.

This site is a prototype

Immortaline is currently a concept prototype. No memorials of real people have been created here. All souls visible (such as Elena Vasiliou) are fictional, used to demonstrate the platform.

The architecture and policies below describe how the production version will operate. Where current behaviour differs, it is noted.

What we keep on our server

Currently: nothing identifying. No accounts, no email collection, no analytics, no advertising trackers. There is no database holding visitor data.

Our web server logs the request URL, timestamp, response code, and the page that referred you — but not your IP address and not your browser identifier. Logs are automatically rotated every two weeks.

What stays in your browser

When you light a candle, leave a wish, place a stone, write a sealed letter, or sit a vigil, that information is saved only on your computer, in your browser's local storage. We do not see it, transmit it, or back it up. If you clear your browser data, it is gone.

This means: another visitor sees an empty Garden when they arrive — your candles do not appear to them. This is intentional for the prototype. The production version will store offerings server-side with proper consent and visibility controls.

What we will keep, in the production version

For deceased persons, once a memorial is created:

• Photographs, audio, and letters uploaded by the family
• The persona profile compiled from those sources
• Voice recordings (only if a quorum of family trustees has consented)
• The visitor offerings (candles, stones, wishes, sealed letters)

For living visitors:

• Your wish text and chosen signature, if you leave one
• The fact that you visited (timestamp), associated with your account if you have one
• Email address, only if you create an account or request notifications

For families and pallbearers:

• Account credentials
• The decisions and votes recorded in the pallbearer governance log

What we will not keep: conversation content with the AI. Architecturally logged are only the metadata (turn count, refusal rate, latency) — never what visitors typed or what the AI replied.

Where data lives

The site is currently served from a server in the United States (DigitalOcean New York). For the production launch we will migrate to a server in the European Union (Frankfurt or Amsterdam) so that European visitors' data does not cross the Atlantic.

Your rights

If you are in the European Union, you have the right under the GDPR to:

• Access — see what we hold about you
• Rectification — correct anything inaccurate
• Erasure — ask us to delete your data ("right to be forgotten")
• Portability — receive your data in a usable format
• Object — ask us to stop processing your data
• Lodge a complaint — with your national data protection authority

In Spain, you may also exercise post-mortem rights under Article 96 of the LOPDGDD on behalf of a deceased relative. Comparable provisions exist in France, Germany, and Italy.

To exercise your rights

Write to info@immortaline.com. We will reply within 30 days. If your request is about localStorage data, you can delete it yourself immediately by clearing your browser's site data for immortaline.com.

Cookies and similar technologies

We do not use cookies. We use browser local storage for the wishes, candles, and letters you leave — this is necessary for the features to work. We do not use it for tracking.

Changes to this notice

We will update this page as the site evolves. Material changes will be summarised at the top of the page on the date they take effect.