Privacy

Last updated 27 October 2026

1. Who we are

Hattech Limited ("we", "us") provides Remembrance at remembrance.myfrontpage.website and each page's own name.myfrontpage.website address. Our Privacy Officer can be reached at abuse@hattech.co.nz.

2. What we collect, and why

• People who make a page (owners): email address and name, to sign you in, keep your page yours, and send messages about it (confirmations, the free-days reminders, receipts). What you add to the story — words, dates, places, photos, voice recordings, short videos, music choices.
• Family and friends who join a page: name, how you knew them (if you say), and email address, to confirm it's you and let you post. Your memories, photos and reactions. Your email is never shown on the page.
• Payments: handled by Stripe — we never see or store card numbers. We keep a record of the amount, date and page for tax purposes.
• Technical: sign-in cookies (needed to keep you signed in — no tracking or advertising cookies), and your network address briefly, to stop abuse such as spam sign-ups. Your choice of view and similar settings are kept on your own device.
• Reports: if you report a memory or a page, what you tell us and (if you give it) your name and email, so we can look into it and reply.
• Help and ideas: questions you ask the "Need help?" assistant are answered by AI and not stored by us. If you send an idea or feedback, we keep what you write, which page of the site you were on and (if you give it) your email, so we can improve Remembrance and reply if you asked us to. Ideas are kept for up to 2 years.

Until a page goes live, its photos, voices and videos stay on your own device. Going live puts the photos and videos the page uses online, so the people you share it with can see them.

3. Who can see it

The page's owners decide who can open the page and who can post (from "anyone" to "only people we share it with"). Memories marked 🔒 private are seen only by the page's owners and the close family they choose. Hattech staff look at content only when needed to run the service, to fix a problem you've asked about, or to deal with a report.

4. Services that help us run Remembrance

These companies process information for us, under their own security and privacy commitments. Most are based overseas, so your information may be stored or processed outside New Zealand (mainly in Australia, the United States and Europe). We choose providers whose protections are comparable to New Zealand's (Privacy Act, IPP 12) and, for people in the EU/UK, who offer standard contractual clauses.

• Cloudflare — hosting, the database and file storage, and the AI that turns voice into words, offers writing help and checks memories for unsafe content (it doesn't train on your content).
• Stripe — payments, including Apple Pay and Google Pay.
• Resend — sending our emails.
• OpenStreetMap (Nominatim and OSRM) — looking up place names you type, and drawing journey-map routes (we send the place name, not who you are); map pictures are loaded from OpenStreetMap, which sees the viewer's network address.
• Google Fonts — the page's typefaces, which also see the viewer's network address.
• Wikimedia Commons / Musopen — free music tracks you choose to play.

We don't sell or rent personal information, and we don't share it with advertisers.

5. How long we keep it

• Drafts saved under an email that isn't confirmed are deleted after 7 days; accounts never confirmed, with nothing in them, after 30 days.
• Pages not kept go offline at 30 days and are permanently deleted at 60 days, with email reminders before each step (see the Terms). Kept pages stay online while we run Remembrance.
• Removed memories: the words, name and photos are deleted straight away.
• Deleting your account deletes the pages only you own (shared pages pass to the next owner), your drafts, and memories you posted as a guest on other pages.
• Payment records (amount, date, page) are kept for 7 years as tax law requires, without your email address once the page or account is deleted.
• Our hosting keeps short-term backups for up to 30 days, so deleted information can take that long to disappear completely.

6. Your choices and rights

You can see and change your page at any time, download its story, memories and photos (Download everything on the tribute's home screen), delete a page or your account, edit or remove your own memories, and ask not to receive emails about a page (every email has a link). You can ask us for a copy of the personal information we hold about you, or to correct or delete it — email abuse@hattech.co.nz and we'll reply within 20 working days. If you're in the EU or UK you also have rights to data portability and to object; our lawful bases are the contract with page owners, and our legitimate interest in running pages families have invited you to.

If you're not happy with how we've handled your information, please tell us first. You can also complain to the Office of the Privacy Commissioner (or your local data protection authority).

7. People who have died, and people named in stories

Pages are often about someone who has died. The Privacy Act protects living people, but we treat these pages with the same care. If you're a relative and want a page about your family member changed or taken down, use ⚑ Report this page or email abuse@hattech.co.nz. Stories and memories often mention living people — please be thoughtful about health, family matters and children, and anyone mentioned can ask us to remove information about them.

8. Children

You must be 16 or over to make a page or join one. Younger family members can take part with a parent or guardian, who is responsible for what they post. Please take care with photos and details of children; a parent can ask for a child's photo or details to be removed.

9. Keeping it safe

Everything travels encrypted (HTTPS). Sign-in uses one-time email links — there are no passwords to steal — and we store only scrambled versions of sign-in codes. Private pages and photos are only served to people the owners have let in. If a privacy breach is likely to cause someone serious harm, we'll tell the people affected and the Privacy Commissioner as soon as we can (and within 72 hours where EU/UK law applies).

10. Changes

We'll update this page if anything changes and, for significant changes, email page owners first.