Privacy Policy
Two kinds of data exist here and they are kept deliberately separate: the public cemetery, and the private payment record. The line between them never moves.
What is public
Everything on a grave page: the recipient's name as the buyer typed it, the optional cardinal sin, the assigned circle, the plot reference, and the creation date. This is searchable on the site and, by design, indexable by search engines.
What is never public
The buyer's email address and the Stripe payment identifiers. These live in a separate table that no public endpoint reads from. No public API response has ever contained a customer email.
The buyer's identity is not shown on the grave page. A recipient cannot tell from the page who bought it.
Payments
Card details are handled entirely by Stripe and never reach this site's servers. Stripe's own privacy policy governs what they retain.
Analytics
Aggregate, privacy-preserving analytics are used to understand traffic and which pages lead to purchases. No email addresses are included in analytics. No cross-site advertising profile is built from this site's own analytics.
If a page is about you
If your name is on a grave page and you want it taken down, you can ask, and it will be withdrawn from public view. You do not need to explain why, and you do not need to have been the buyer.