Clarity, care, and choice
Privacy disclosure
Effective and last updated October 24, 2026
Your memories deserve clear choices. This disclosure explains the current Where Hope Holds service at wherehopeholds.org, a memorial project managed by Blake Kennedy. Use our Privacy center to contact the operator, exercise a privacy right, or change memory-storage consent.
Who this service is for
Accounts and member features are offered to adults age 18 or older who reside in the United States. Public verses and poems can be read without an account. We do not offer child accounts or knowingly invite children to provide personal information. If you believe an underage account exists, report it in the Privacy center so the operator can investigate and address the data.
What we collect and why
| Information | Purpose and source |
|---|---|
| Email, chosen display name, sign-in credentials, verification and session records | You provide account information to create and protect your account. Supabase Auth handles passwords and sign-in; passwords are not stored in the website’s member-record database. |
| Loved-one names, relationships, dates, tributes, photos and captions, original audio and notes, journals, keepsakes, obituary links, saved verses | You choose what to store and organize in your private space. These items can reveal emotional wellbeing, health, religious beliefs, family relationships, or other sensitive information. Enable optional memory storage before adding or changing them; see the separate Consumer health privacy notice. |
| Community display name, post or reply, chosen sharing consent, reports and moderation decisions | You choose to submit content for sharing with signed-in members after moderation, or report a concern. Sharing a community post is separate from storing private memories. |
| Privacy choices, policy versions, request email and message, handling records | We record your choices and handle access, correction, deletion, consent-withdrawal, appeal, accessibility, copyright, and safety requests. |
| Technical information, such as IP address, browser/device details, request times, error and security logs | Hosting, authentication, and delivery systems may process this automatically to deliver pages, prevent abuse, and investigate faults. The application does not ask for precise location, contacts, or microphone access. |
| Previously saved charity suggestions | The giving section is currently hidden and no donations are collected through this site. Existing suggestions may remain in the account and can be included in an export or deletion request. |
Only provide material you may lawfully store, including recordings and information about living people. Do not upload medical records, identification documents, or information you do not want stored. Reading content does not require optional memory storage.
Private space and community visibility
Other members cannot browse your private memories. The management portal normally shows account details and item counts, not private memory contents. This is account-based access protection, not end-to-end encryption: the operator and infrastructure providers may have technical access needed for operation, support, security, legal obligations, or a verified privacy request. No system can promise absolute security.
A community post and its display name are shown to signed-in members after approval; moderators see pending submissions and reports. Report details are not shown to the reported member. Do not put contact details, another person’s private information, or material you wish to keep confidential in a community submission. Members may copy or screenshot what they see. Removing a post cannot retrieve copies others have already made.
Service providers and other recipients
- Supabase: account authentication, verification, recovery, and session processing.
- OpenAI Sites and Cloudflare infrastructure: website hosting and operation; member records are stored in Cloudflare D1 and uploaded photos/audio in R2. A standalone site login is used; members do not need a ChatGPT account.
- Configured email delivery providers, including Resend where configured: transactional account messages sent through the authentication service. No marketing-email subscription is created by signing up.
- Other members and moderators: only the community submissions and concerns described above, according to their visibility.
- Legal or security recipients: information may be disclosed when required by law, to respond to a valid legal request, or as reasonably necessary to protect rights and safety. We do not promise that private content is legally privileged.
Providers process information in the places their services operate, which may include locations outside your state or the United States. Their safeguards, contracts, operational logs, and backup arrangements also matter. We do not claim that all processing occurs in one jurisdiction.
External links and previews
Following a scripture, obituary, song, or other external link opens another service governed by its own practices. Obituary previews and external preview images are not loaded automatically: you choose “Load external preview.” The obituary site receives a server request and an image host may receive your IP address and browser information when its image loads. Sharing by text, email, or your device’s share menu sends the information you choose to that app or recipient; private memories are not automatically attached.
Cookies, advertising, and tracking signals
The application uses essential sign-in/session cookies and necessary security mechanisms. It does not include advertising pixels, behavioral advertising, or optional analytics trackers. We do not sell personal information or share it for cross-context behavioral advertising. Do Not Track and Global Privacy Control signals do not switch off essential account/security processing; there is no advertising sale/sharing to opt out of in the current application. Blocking essential cookies can prevent login. If optional tracking is introduced, this notice and any required consent controls must be updated before it is enabled.
AI, clinical care, and payments
No AI grief companion, transcription, voice cloning, or automated health assessment is currently offered by this application. Private memories are not submitted by the application to an AI model. New AI uses would require separate disclosures and appropriate choices before launch. This site provides memorial tools, readings, and peer support; it is not a medical provider, therapy service, or emergency-response service. No payments are currently accepted.
Retention, deletion, and backups
We keep account and memory records to provide the features you choose until you remove them, request deletion, or the service closes, subject to necessary legal/security exceptions. Individual delete controls remove active records and initiate removal of associated stored files. Deleting a loved-one profile alone preserves the memories as unassigned items. Original files should also be kept in your own backup; permanent hosting is not guaranteed.
Privacy and consent records may be retained as needed to demonstrate choices, handle disputes, and meet legal obligations. Closed privacy-request records are removed from the application when reviewed after two years. Provider logs, archives, and backups can have different retention and deletion processes. The operator must coordinate applicable processor and backup deletion as part of a verified request; removal from active systems does not mean every backup disappears instantly. Applicable legal deadlines and narrow retention exceptions still apply.
Your choices and requests
In the Privacy center, signed-in members can withdraw future memory-storage consent and export their text/metadata. Existing originals can be downloaded separately. You can correct or delete items in your space and request account or sensitive-data deletion, access, correction, restriction, information about recipients, or an appeal. You do not need an account to contact us. We verify identity when needed to protect private information and request only information proportionate to that purpose; authorized agents may explain their authority. Requests are reviewed by the operator, with a goal of responding within 30 days and compliance with applicable deadlines. If more time is lawfully needed, the operator should explain the extension. Exercising a privacy right does not trigger a fee or loss of unrelated reading access.
State privacy rights and exceptions depend on applicable law. You may appeal a decision using the same form and may contact your state attorney general or privacy regulator. We do not state that every privacy statute applies to this project, or that this disclosure is a certification of compliance.
Changes and contact
The effective date appears above. Material changes will be posted here and, when appropriate, brought to members’ attention or presented for renewed consent before a new use. Contact Blake Kennedy, the site owner, through the privacy-request form. For more detail about sensitive information, read the separate Consumer health privacy notice.