Privacy & Security
How your data and memorials are protected
Our commitment to your privacy
At Forever in Heart, we handle some of the most personal and sensitive content imaginable — the lives, photos, and stories of people's loved ones. We take that responsibility seriously. We will never sell your data, use it for advertising, or share it with third parties without your consent.
Who can see a memorial?
Memorial pages are publicly accessible by default. This means anyone with the link — whether they have a Forever in Heart account or not — can visit the page, read the biography and obituary, view the photo gallery, and see tributes.
This is by design: memorial pages are meant to be shared widely so that family, friends, colleagues, and community members can all pay their respects and contribute their memories.
| Action | Who can do it |
|---|---|
| View the memorial page | Anyone with the link (no account needed) |
| View the obituary | Anyone with the link (no account needed) |
| Leave a tribute or light a candle | Any logged-in Forever in Heart user |
| Add photos to the gallery | Members with Contribute or Admin access |
| Edit memorial details | Account owner and members with Admin access |
| Write and publish the obituary | Account owner and members with Admin access |
| Invite new members | Master Admin and Super Admin only |
| Delete the memorial | Account owner (Master Admin) only |
What personal data do we store?
We collect and store only what is necessary to provide the service:
- Account information — your name, email address, and encrypted password.
- Profile photo — if you choose to upload one.
- Memorial content — all biography text, photos, dates, and obituary content you create.
- Tribute messages — messages left on memorial pages under your account.
- Activity data — actions taken within the platform (candles lit, tributes left) associated with your account.
Keeping your account secure
- Use a strong password — at least 8 characters including numbers and symbols. Never reuse passwords from other sites.
- Do not share your login — if you want to give someone access to a memorial, use the Invitations feature. Never share your password.
- Log out on shared devices — always sign out when using a public or shared computer.
- Check your active invitations — regularly review who has access to your memorials in User Management → Members.
- Update your password regularly — go to Settings → Password to change it at any time.
Permanent storage and data retention
Memorial pages are designed to be permanent. They do not expire, are not automatically deleted, and remain accessible indefinitely. This is central to our mission — your loved one's memorial should outlast any single technology platform.
If you wish to delete a memorial or your account, please contact our support team. We will process deletion requests in accordance with our Privacy Policy and applicable data protection laws.