Privacy Policy

Last updated: October 27, 2026

This Privacy Policy explains how we collect, use, and protect your information when you use Wall of Forever ("Service", "we", "us", or "our"). For operator details, see our Imprint.

1. Information We Collect

Account Information

When you sign in using Google Sign-In, we may collect:

• Name

• Email address

• Profile identifier

We use this information to:

• Create your account

• Allow login

• Communicate with you

• Send your brick certificate

Gift Recipient Information

When you send a brick as a gift, we collect the recipient's name and email address as provided by you. This information is used solely to deliver the gift notification. Gift recipients who do not claim their gift or create an account are not tracked further.

Content Information

When you create a brick, we collect:

• Text content you submit

• Uploaded images

• Selected brick location

• Creation timestamp

Uploaded images may be compressed, resized, and stored for display purposes. Original files may not be preserved.

All approved content becomes publicly visible — for a sealed brick, only when its seal opens (see below).

Sealed Bricks

When you seal a brick, its text, photo, date and place are stored apart from the public wall and are not shown publicly until the seal opens: on the date you chose (time capsule), once enough people have reacted (crowd seal), or never (private brick). Until then the public sees only the seal, the date it opens or the number of reactions it needs, a crowd seal’s one-line teaser, and a fingerprint — a one-way code computed from the sealed content that reveals nothing about it. Sealed photos are kept in non-public storage and shown only through short-lived links to people allowed to see them: you, the people you give a private brick’s key to, and our moderators. Sealed content is moderated like any other brick, including the automated review described below.

Private bricks. If you invite someone by email, we store their email address and send them one email with their own link; you can remove them at any time, and so can they by contacting us. A passcode you set is stored only as a one-way hash.

Reminders. Anyone may leave an email address on a time capsule or crowd seal to be told when it opens. We send one email asking you to confirm; only if you confirm do we write again — once, when the seal opens — and the address is then deleted. Unconfirmed requests are deleted after 7 days. Our legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time from the link in the email.

Reactions to crowd seals. To count each person once, a reaction from a visitor who is not signed in is recorded with a random identifier kept in a cookie (see our Cookie Policy) and with a keyed one-way hash of the network address it came from, which changes every day; the address itself is not stored. If you are signed in, the reaction is linked to your account and your name may appear among the people who reacted, as with any reaction. Where enabled, a bot check by Cloudflare Turnstile may run before an anonymous reaction or reminder request. Our legal basis is legitimate interest (Art. 6(1)(f) GDPR) in keeping the count fair.

Payment Information

Payments are processed by Lemon Squeezy, our payment provider.

We do not store credit card details or payment credentials.

We may receive limited payment-related information such as:

• Transaction confirmation

• Payment status

• Country or currency used

Prices are displayed in EUR but may be charged in local currency depending on payment provider settings.

Moderation Information

All content submitted to the Service may be subject to automated review or manual review. Content flagged for review may remain temporarily hidden until moderation is completed.

Automatically Collected Technical Data

When you use the Service, our servers automatically record technical data, including:

• IP address

• Request metadata (timestamp, requested URL, response status)

We use this data to operate and secure the Service, prevent abuse, and apply rate limiting. Server logs are retained for a limited period (approximately 30 days) and then deleted.

Anonymous Visit Statistics

To understand which pages are useful and where people get stuck, we count visits ourselves — no third-party analytics service is involved. For each page view or step (for example, opening the brick editor, signing in or completing a purchase) we record only: what happened, the page address without any query string, the website you came from (if your browser shares it) and the campaign named in the link you followed (if any), the country your browser’s time zone belongs to (for example, Europe/London gives the United Kingdom — no location is looked up from your address), the kind of brick involved, the page you started your brick on, whether the device is a phone or a computer, and the kind of browser and operating system (for example, Safari on iOS — never their versions). For a checkout or a purchase we also record what was in it: the size, whether it was sealed or a gift, whether it had a photo or a draft from the writing helper, and its price.

We do not use cookies or store anything on your device for this, and we do not store your IP address, your time zone or your browser’s identifying details. So that we can count visitors rather than page views, our server turns your IP address and browser details into a short code using a secret key that is made each day, kept only in memory and discarded at midnight (UTC); only the code is stored. It shows which steps one visit took that day, but it cannot be turned back into your address, and the next day’s code cannot be matched to it, so the counts cannot be linked to you. If your browser sends a Do Not Track or Global Privacy Control signal, nothing is counted. The counts are kept for about 13 months and then deleted. Our legal basis is legitimate interest (Art. 6(1)(f) GDPR) in improving the Service.

2. How We Use Your Information

We use your data to:

• Provide the Service

• Process purchases

• Display public memorial content

• Generate brick certificates

• Moderate content

• Prevent abuse

• Respond to support requests

• Comply with legal obligations

3. Public Nature of Content

Wall of Forever is a public platform. Approved content — including a time capsule or crowd seal’s content once its seal opens, but never a private brick’s:

• Is publicly visible

• May be accessed by anyone

• May appear in search engines

Users should not upload sensitive or private personal information.

4. Legal Basis (GDPR)

If you are located in the European Union, your data is processed under the General Data Protection Regulation (GDPR). Legal bases include:

• Performance of a contract (Art. 6(1)(b) GDPR)

• Consent (Art. 6(1)(a) GDPR) — for seal reminders

• Legitimate interest (Art. 6(1)(f) GDPR)

• Legal compliance (Art. 6(1)(c) GDPR)

5. Data Storage and Hosting

Account data and brick records are stored on servers operated by Hetzner in data centers located within the European Union.

Uploaded images, generated certificates, and backups are stored using Cloudflare R2 object storage and delivered via Cloudflare's content delivery network. This data may be processed or stored outside the European Union; where this occurs, it is subject to appropriate safeguards as provided by the relevant provider.

We take reasonable technical measures to protect your information.

6. Data Retention

We retain data:

• As long as the Service remains operational

• As necessary to provide purchased placements

• As required by law

Public brick content is intended to remain available for as long as the Service exists. You may request deletion of your account data at any time. Published brick content is not deletable by users and will remain on the wall as described in our Terms of Service.

7. Your Rights

Depending on your location, you may have the right to:

• Access — request a copy of your personal data

• Rectification — correct inaccurate data

• Erasure — request deletion of your data

• Data portability — receive your data in a structured, machine-readable format

• Object — object to processing based on legitimate interest

• Complaint — lodge a complaint with your local data protection authority

To exercise any of these rights, contact us at support@wall-of-forever.com.

8. Content Removal

Published content is not deletable by users. We may remove content if required by law, if it violates our policies, or in response to a valid legal complaint. Removal may occur without prior notice.

9. Cookies

The Service uses essential cookies necessary for authentication and session management. We do not use advertising or tracking cookies. See our Cookie Policy for details.

10. Third-Party Services

We rely on the following third-party services:

• Google — authentication

• Lemon Squeezy — payment processing

• Hetzner — hosting infrastructure

• Cloudflare — image and certificate storage, content delivery, DNS, and (where enabled) the Turnstile bot check for anonymous crowd-seal reactions and reminder requests

• Resend — transactional email delivery, including seal reminders and private-brick invitations

• OpenAI — automated content moderation, the optional writing helper (“Help me write it”), suggesting the kind of brick and occasion from your message, and suggesting how your brick could look

• GlitchTip — error monitoring and diagnostics

These providers may process limited user data as required to deliver their services. The text and photo of your brick are sent to OpenAI for automated moderation. If you use the writing helper, the notes you type into it (and your current message) are sent to OpenAI only to write a draft for you; when you move on from the first step without choosing a kind of brick yourself, your message may be sent to OpenAI to suggest one. When you choose how your brick looks, your message, the size and design options being considered, and — if you added one — a small, reduced copy of your photo may be sent to OpenAI to suggest a size, design and colours and where the photo’s main subject is, so the crop keeps it. We do not store what is sent for these suggestions, and nothing they produce is published unless you put it on your brick yourself. The writing helper is for signed-in accounts, and each account gets a set number of drafts until it buys a brick: to count them, we keep a note of when your account asked for each draft — never what was sent or written — and delete it if you ask us to erase your data. Recipient names and email addresses you provide for gifts or account communication are processed by Resend solely to deliver email.

When the Service encounters a technical error, a diagnostic report is sent to GlitchTip so we can fix it. These reports contain the error message, the technical stack trace, the page or API route involved, and your browser and operating system version. They do not contain your name, email address, or the content of your bricks: identifying values are removed before a report is sent, and IP addresses are either omitted or replaced with an irreversible one-way hash. Diagnostic reports are used solely to diagnose and fix faults.

11. Security

We take reasonable measures to protect user accounts, stored content, and system integrity. However, no system is completely secure.

12. Children's Privacy

The Service is intended only for users 16 years of age or older. Users under 16 are not permitted to use the Service.

13. Changes to This Policy

We may update this Privacy Policy periodically. Updated versions will be published on this page. Continued use of the Service indicates acceptance of changes.

14. Contact

For privacy-related requests, see contact details on our Imprint page.