Privacy Policy

We do not store what you write. Not the name, not the memories, not the eulogy the tool produces. There is no database of eulogies, no account, and no copy kept once your request has been answered.

We do process a small amount of technical data — mainly your IP address — to keep the site working and to stop it being abused. That is set out in full below, because a privacy policy that only mentions the flattering parts is not worth reading.

The controller of your personal data is Valentyn Siedlovskyi, a sole proprietor (Atividade Individual) registered in Portugal, tax number PT322889960, at Rua da Fonte, 8, 4 Esq., 2410-261 Leiria, Portugal, trading as WriteEulogy.

For anything on this page, write to support@writereulogy.com. We are not required to appoint a data protection officer and have not appointed one; that address reaches the person responsible.

What you type into the tool — the name of the person who died, your relationship to them, and the memories you share.

This is sent to our server and passed straight to Google’s Gemini API, which writes the eulogy, and the result is returned to your browser. It is not written to a database, a log or a file at any point. Legal basis: performance of a contract (GDPR Article 6(1)(b)) — it is the service you asked for.

Please note that what you write may include personal data about someone who has died and about their family. Data protection law does not apply to people who have died, but it does apply to living relatives you might mention. Share only what you are comfortable sharing; the tool works with as much or as little as you give it.

Your IP address — processed for two purposes.

• Rate limiting. We count requests per IP address to stop one visitor or a script exhausting the service. The counters are stored by Upstash and expire within 24 hours.
• Server logs. Our host, Vercel, records requests including IP addresses as part of running and securing the platform.

Page visits — counted with Vercel Web Analytics, so we can see which guides people read. It sets no cookies and stores nothing on your device. It records the page, the referring site, and your browser, operating system and country; Vercel describes it as identifying a visit by an anonymised value that is reset daily rather than by any identifier that follows you. We see only totals. It is not linked to your eulogy.

Legal basis for all three: legitimate interests (Article 6(1)(f)) — keeping the service available, secure and affordable to run, and knowing which parts of it are useful. We consider this proportionate because the data is technical, is not linked to your eulogy, and is short-lived or aggregated.

Your payment — handled entirely by Stripe on Stripe’s own pages. We never see or receive your card number. When you return from Stripe we ask Stripe to confirm that the checkout session was paid; the response includes the session details we ourselves attached to it, which are a one-way hash of your inputs and nothing more. Legal basis: performance of a contract (Article 6(1)(b)), and legal obligation (Article 6(1)(c)) for keeping accounting records.

We use these providers. They act as our processors, except Stripe, which is also a controller in its own right for payment and fraud purposes.

• Google — writes the eulogy through the Gemini API. Gemini API terms.
• Stripe — payments. Stripe privacy policy.
• Vercel — hosting, server logs and cookieless visit counting. Vercel privacy policy.
• Upstash — the short-lived rate-limit counters. Upstash privacy policy.

We do not sell data, share it for advertising, or pass it to anyone who is not listed above.

The providers above are established in or process data in the United States, so your data is transferred outside the European Economic Area. Those transfers rely on the safeguards each provider offers — the European Commission’s Standard Contractual Clauses and, where the provider is certified, the EU–US Data Privacy Framework. You can ask us for details of the safeguards that apply.

• The eulogy and what you typed: not retained by us at all. It exists for the length of the request and then it is gone.
• The draft in your browser: held in your own device’s session storage so it survives the trip to the payment page. It belongs to that tab and disappears when you close it. We cannot see it.
• Rate-limit counters: expire within 24 hours.
• Server logs: kept by Vercel for the period set out in their policy.
• Visit counts: held by Vercel in aggregate, for the retention period of our Vercel plan.
• Payment records: held by Stripe, and kept by us for as long as Portuguese tax law requires accounting records to be retained.

This site sets no cookies at all. No advertising, no trackers, and no third-party scripts — the fonts are served from our own domain rather than from Google. The visit counter described above is served from this domain too, and reads and stores nothing on your device.

The only thing stored on your device is the draft of your eulogy, in session storage, and only so that it survives the redirect to the payment page and back. That is strictly necessary to provide the service you asked for, so under the ePrivacy rules it does not require consent.

That is why you have not been shown a cookie banner. There is nothing to consent to. If that ever changes, you will be asked properly before anything is set.

Stripe may set cookies necessary for checkout and fraud prevention, but only on Stripe’s own pages once you leave this site.

The tool uses AI to write text. It does not make any decision about you, and there is no automated decision-making producing legal or similarly significant effects within the meaning of Article 22.

This service is not directed at children, and we do not knowingly process the data of anyone under 16.

Under the GDPR you have the right to:

• ask what personal data we hold about you, and get a copy;
• have inaccurate data corrected;
• have data erased;
• restrict how we process it;
• receive data you gave us in a portable, machine-readable form;
• object to processing based on our legitimate interests, including the rate limiting described above;
• withdraw consent at any time, where we relied on consent — although in practice we do not rely on consent for anything.

Write to support@writereulogy.com and we will answer within one month.

In practice there is very little to show you. We hold no eulogies and no accounts. What exists is a short-lived counter against an IP address and the record of any payment held by Stripe — tell us roughly when you paid and we can help you reach it.

If you are unhappy with how we have handled your data you can complain to the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), or to the authority where you live.