Privacy
Privacy Policy
Your stories stay yours. Here’s exactly what we keep, and why.
About this policy
This policy explains what Memory Postcards collects, why, who we share it with, how long we keep it, and the choices you have. Memory Postcards is run by Practice Everything LLC, doing business as Memory Postcards (“we” or “us”).
It covers memorypostcards.com and everything on it, whether you ask a question, answer one, or open a postcard someone shared.
What we collect
- Your account. Your email address and first name. The time you agreed to our Terms, and which version.
- People you add. Their name, and a nickname or email if you add one. A mailing address, only if you add one for printed cards.
- Questions. What you asked. If you record your question, the video or voice too.
- Stories. The answer someone sends: video, voice, written words, and any photo. The name they typed. The words shown with a recording, if someone adds or fixes them.
- Consent. The exact sentence shown above Send or Save, and when it was tapped. If a story is unshared, when.
- Printed postcards. Who each card goes to, their mailing address, and the print-ready artwork. That artwork includes the card’s photo, words, names and code.
- Payments. Paid features aren’t open yet. When they are, Stripe handles your card. We keep the amount and order details, never your full card number.
- Email delivery. Whether an email we sent arrived, bounced or was marked as spam. If someone stops our emails, we keep a scrambled form of their address so we never email them again.
- Sign-ups. If you ask us to tell you when something opens, that request.
- Technical data. Like any website, ours receives your IP address and basic browser and device details with each visit. Our hosting, sign-in and bot-protection providers use them to deliver pages, keep you signed in and stop abuse, and keep them in their logs for a limited time. Our sign-in system also stores the IP address and browser of each signed-in session, until that session ends.
- Abuse counters. To slow down abuse, our own app counts requests using a one-way, keyed code made from your IP address. Those counters never hold the address itself.
Photos people see have location and camera details removed. The original upload is kept privately with the story.
How we use it
We use what we collect only to:
- run Memory Postcards: save stories, play them, and make cards;
- send the emails you ask for, and sign-in codes;
- print and mail postcards you order;
- keep accounts safe and stop spam and abuse;
- answer you when you write to us;
- follow the law and enforce our Terms.
What we never do. We don’t sell your information. We don’t share it for advertising. We don’t show ads. We don’t use stories to train AI. We don’t use face recognition, voice cloning or AI transcription. Recordings are converted on our own servers, not sent to an AI service.
Who sees a story
The person who asked sees the questions they asked and the stories they get back. The person who answered can see their story too, on the phone they sent it from.
Anyone else sees a story only through a link or postcard code the person who asked shares. A text preview of a link shows only the card front and who sent it.
We look at an account or story only to fix a problem you report, to check a report of abuse, or when the law requires it.
Links and postcard codes
A link or postcard code works like a key. Anyone who has it can open that card or set of cards, without signing in. That includes the recording, the words shown with it, and first names. It never opens anything else in the account.
Shared links last until they’re unshared. They don’t expire on their own. Before you share, keep in mind:
- anyone you send a link to can forward it;
- anyone holding a printed card can scan its code;
- a text preview of a link shows the card front and who sent it;
- unsharing can’t remove a copy someone already downloaded, saved or took a screenshot of.
The person who shared a link can unshare it anytime. A story that’s unshared stops playing on every link and code.
Keeping a postcard. If you sign in to keep a postcard someone sent you, your account stores a pointer to it, not a copy. It leaves your Postcards when the sender unshares it or stops the link, and you can remove it yourself anytime.
File links are different. When a story plays, your browser gets a separate link to the recording itself. Those links expire within minutes to an hour, and can’t be reused after that. Our printer gets file links that last 7 days.
Unsharing stops new file links right away. A file link handed out just before can keep working until it expires or the file is erased, whichever comes first. We can’t pull back what a browser has already loaded or someone has already saved.
A question link lets whoever holds it answer that question. It stays open until the story is sent or the question is closed.
Who we share it with
We share information only with companies that help us run Memory Postcards. Except as noted below, they may use it only to provide their service to us.
- Hosting: Vercel runs the website. Like every web host, it receives each visitor’s IP address and browser details.
- Database, files and sign-in: Supabase stores accounts, stories and recordings, and sends sign-in codes.
- Email: Resend delivers the emails we send.
- Bot protection: Cloudflare Turnstile checks that a real person is starting a session. It looks at your IP address and browser and device signals when you start asking or sign in. Cloudflare also uses that information on its own behalf to improve its bot detection. For that, its own Turnstile privacy notice applies.
- Printing and mail: Prodigi prints and mails postcards you order. It gets the card, name and mailing address.
- Payments: Stripe, once paid features open.
We may also share information if the law requires it, to protect someone’s safety, or to stop fraud or abuse. If Memory Postcards ever moves to another organization, this policy goes with it, and we’ll tell you first.
We don’t share personal information with anyone for their own marketing.
How long we keep things
- Your account stays until you delete it. Deleting happens right away, and it can’t be undone. We sign you out everywhere. All your links, card codes and question links stop working. Your questions, people and addresses are erased, and your email and name are removed from sign-in. Your stories, recordings, photos, converted copies, still pictures and card images are erased within a day, usually within minutes. A story you told for someone else stays in their account until it’s unshared. The rest of this list says what stays after you delete your account, and why.
- A story you remove can be undone for a few seconds. Then it’s deleted. Its recordings, photos, converted copies, still pictures and card images are erased within a day, usually within minutes.
- A story that’s unshared leaves the asker’s account right away. Its recordings, photos, converted copies, still pictures and card images are erased within a day, usually within minutes. Print orders of it that haven’t gone to the printer are canceled.
- A person you remove is hidden right away and their question links stop. Their name and email are erased when you delete your account.
- Downloads you request are ready for 7 days, then erased. If a story in one is unshared, that download stops right away and is erased within a day. A download already started can finish.
- Unsent answers on your device, as described under Cookies and tracking.
- Abuse counters are erased after 2 days.
- Print-ready artwork is erased 90 days after the order goes to the printer. That leaves time for reprints and damage claims. If an order is canceled or never printed, its artwork is erased within 7 days.
- Order and payment records stay for as long as tax and accounting rules require, usually 7 years. They say what was ordered, the price, the name and mailing address it went to, and when. They don’t include the artwork, and they stay even if you delete your account.
- Consent records stay as long as the story, or any copy or card made from it, may still exist. They hold the sentence shown and when it was tapped, not the story. We use them only to show what someone agreed to, or to handle a dispute.
- Stopped emails. If someone stops our emails, we keep a scrambled form of their address for as long as we send email. Its only use is to make sure we never email them again.
- Security records of key actions, like a sign-in, a deletion or unsharing, stay as long as needed to protect accounts and handle abuse or legal claims. Signed-in sessions, with their IP address and browser, are deleted when you sign out or delete your account.
- Backups. Deleted information can stay in our backups until they roll over, within 30 days.
Your choices and rights
- See and download. You can see everything in your account and download any story for free.
- Fix it. You can change your name, the people you added, and the words shown with a recording.
- Delete. Delete your account in Settings, or remove a single story.
- Unshare a story. If you answered, open your question link on the device you sent it from. Tap Unshare my story. Don’t have that device? Email us through Help. We’ll unshare it for you.
- Stop emails. Every email has a link to stop them.
- Unshare. Unshare a link or turn off a postcard code anytime.
Requests without an account. You don’t need an account to ask us anything. Email hello@practiceeverything.com. Use it to see, fix or delete information about you. Use it to report a story you’re in, or a recording made without your OK. Include the link or postcard code if you have it.
We may ask you to confirm the request from the email address involved, or the device that sent the story. We answer within 45 days, and usually much sooner.
California residents have the right to know what we collect, to correct it, to delete it, and not to be treated differently for asking. We don’t sell or share personal information for advertising, so there’s nothing to opt out of.
18 and older
Memory Postcards is for people 18 and older. Only people 18 and older may make an account, ask, answer or record, and everyone heard or seen in a recording must be 18 or older. We don’t knowingly collect information directly from anyone under 18. If you think we have, email hello@practiceeverything.com and we’ll delete it.
An account holder may add a family photo, or a written or told story, that includes someone under 18, if they have the right to. We treat it like any other story. It’s seen only through links the account holder shares, and it’s erased the same way. To have something about a child removed, email hello@practiceeverything.com.
Keeping it safe
Recordings and photos are stored privately. They’re reachable only through short-lived file links made for the people allowed to see them. Shared links and question links are stored in our database only in scrambled form. A printed card’s code is stored as is, because it’s printed on the card for anyone holding it. Sign-in uses one-time codes, so there’s no password to steal.
No system is perfect. If something goes wrong that affects you, we’ll tell you as the law requires.
When this policy changes
If we change this policy, we’ll post the new version here with a new effective date. For a change that matters, we’ll email account holders at least 14 days before it takes effect.