Privacy Policy
This is a draft, published early on purpose. It describes what the software actually does today and was written against the code, but it has not been reviewed by a lawyer, and 2 details still need filling in — they are marked in the text like [[THIS]]. We would rather you could read it now than wait behind a page that does not exist. Questions: support@eternaqr.com.
Last updated 1 August 2026.
EternaQR is operated by EternaQR LLC, registered in Illinois, at 607 4th Ave, Mendota, IL 61342.
Questions about anything below: support@eternaqr.com.
The short version
We collect what we need to run the service and nothing else. We do not track you across the web, we do not use advertising cookies, we do not sell or share your data, and we have no third-party analytics. If you want your data removed, write to us and we will remove it.
That is not marketing language — it is a description of the software. The detail below explains exactly what is stored and why.
1. What we collect
If you create an account
| Data | Why |
|---|---|
| Email address | To sign you in, verify your address, and send you your QR code |
| Display name | To address you in the app and in email |
| Password | Stored only as a bcrypt hash — we never see or store your actual password |
| Account timestamps | To operate and support the account |
What you put in a memorial or profile
Everything you write and upload: names, dates, biography, a message from the family, photographs, captions, life events, and — for a place or object — its title, description, and history.
You control whether this is public. A profile starts private and becomes publicly readable only when you publish it. You can unpublish it at any time.
If you submit a memory as a visitor
Your name and your message. We do not collect your email address for a memory. We store a one-way salted hash of your IP address and browser identifier — not the values themselves — solely to detect abuse. That hash cannot be reversed to identify you.
If you nominate someone through "Shine a Light"
The subject's name, your description, and your email address.
This is the only place on EternaQR where we store a visitor's contact details. We use it for one thing: to contact you about that nomination. We will not add you to a mailing list, use it for marketing, or give it to anyone else. You consented to this specific purpose when you submitted the form, and that purpose is the limit of what we may do with it.
We also store the same one-way salted hash described above, for abuse detection only.
When someone scans a QR code
We record that a scan happened, roughly what kind of device it was, and when. We store a one-way salted hash of the visitor's IP address and browser identifier — never the IP address itself. A scan log is a record of where someone physically stood, and we deliberately built it so that record cannot be tied back to a person.
2. What we do not do
- No advertising cookies. In fact, no cookies at all — your sign-in token
is kept in your browser's local storage, which is functional storage necessary for the service you asked for.
- No third-party analytics. No Google Analytics, no tag manager, no
tracking pixel, no session recording.
- No third-party scripts of any kind on the pages you visit.
- No selling or sharing of personal data. Ever, for any price.
- No profiling or automated decision-making.
Because of this, you will not see a cookie consent banner on EternaQR. That is not an oversight — there is nothing to consent to.
3. Who we share data with
Only the services required to operate:
| Provider | What they handle |
|---|---|
| Railway (Ireland/EU) | Running the API |
| Vercel | Running the website |
| Neon | Storing the database |
| Cloudflare R2 | Storing uploaded photographs |
| Resend | Sending transactional email |
| Stripe (when payments are enabled) | Processing payments. We never see or store your card details. |
Each processes data on our instructions only. We do not give data to anyone else unless we are legally required to.
4. Your rights
Wherever you live, you can ask us to:
- See the data we hold about you
- Correct anything wrong
- Delete your data
- Export your data in a portable form
- Object to how we use it
Write to support@eternaqr.com. We will respond within 30 days.
If you are in the EU or UK
Our lawful bases are: contract (running your account and your profile), consent (the Shine a Light email address), and legitimate interests (keeping the service secure and free from abuse). You can withdraw consent at any time. You also have the right to complain to your local data protection authority.
A note on deletion, and why memorials are different
We will delete your account and your personal data on request.
A published memorial is treated differently, and you should understand why before you ask. People print QR codes and bond them to headstones. A memorial that vanishes because an account was closed would break something physical and permanent that a family relies on. So when you ask us to delete your account we will:
- Remove your personal data — email, name, and password hash
- Keep the memorial itself online, unless you specifically ask us to remove
that too
- Tell you clearly which of those we have done
If you want the memorial gone as well, say so and we will remove it.
The content of a memorial about someone who has died is generally not personal data about a living person (GDPR Recital 27 excludes the deceased). But a memorial often mentions living people — see the next section.
5. If you appear in someone else's memorial
A memorial may name you, show your face in a photograph, or describe you in a visitor's memory. You did not agree to any of that, and you do not have to accept it.
Write to support@eternaqr.com and we will remove the specific content. We respond within 30 days. We do not require you to explain your relationship to anyone or justify the request.
We can remove an individual photograph, an individual memory, or a passage — we do not have to take down the whole memorial to honor your request.
6. Visitor memories
Memories submitted by visitors are held for the profile owner to review and do not appear publicly until approved. We do not verify them. They are the personal opinions of whoever wrote them and are not endorsed by us.
If a memory concerns you and you want it removed, write to support@eternaqr.com. We reserve the right to remove any memory at any time, whether or not it has been approved.
7. How long we keep things
| Data | Retention |
|---|---|
| Account data | While your account is open; deleted on request |
| Published profiles | While the service operates (see the Terms on continuity) |
| Shine a Light nominations | 12 months, then deleted |
| Scan records (hashed) | 24 months, then deleted |
| Rejected or unapproved memories | 90 days, then deleted |
| Verification and password-reset tokens | 24 hours / 1 hour, stored only as hashes |
Honest note about enforcement: these periods are our stated policy and we apply them manually today. Automatic enforcement is being built. If a period matters to you, write to us and we will delete the data immediately rather than wait for the schedule.
8. Security
- Passwords are hashed with bcrypt. We cannot read them.
- Password-reset and verification tokens are stored only as hashes, so a
database leak would not hand anyone a working reset link.
- IP addresses are never stored in a recoverable form anywhere in the system.
- Traffic is encrypted in transit.
- Sign-in is required for anything that changes your data.
No system is perfectly secure, and we will not pretend otherwise. If you find a vulnerability, please tell us at support@eternaqr.com.
9. Children
EternaQR is not directed at children under 13, and you must be 18 or older to create an account.
Anyone may submit a memory or a nomination — a grandchild sharing a memory of their grandmother is exactly the kind of thing this service is for, and we are not going to put an age wall in front of it. But if we learn that we hold personal data from a child under 13, we will delete it. If you are a parent or guardian and believe we hold your child's data, write to support@eternaqr.com and we will remove it.
10. International transfers
We are based in the United States and our providers may process data there and elsewhere. If you are in the EU or UK, your data may be transferred outside your region. We rely on our providers' standard contractual clauses for these transfers.
11. Changes
If we change this policy materially we will update the date at the top and, where it affects you meaningfully, tell account holders by email.
Contact: support@eternaqr.com EternaQR LLC, 607 4th Ave, Mendota, IL 61342