draft. written to be checked by Derek (and a lawyer) before it's published. anything marked [to decide] isn't settled yet.
your memories are yours.
these are the promises first. each one is kept by how treasure box is built, not just by this page.
nobody at treasure box opens them. our admin view shows counts and sizes, never pictures, and only you can load your photos.
your photos go from your phone to our storage and back to you. we don't send them to any ai, analytics or ad company, and we don't use any.
every memory starts private. nothing is shared unless you choose who sees it.
if your plan ends, your timeline stays here to look at and download. you just can't add or change anything until you renew.
every original at full quality, a folder per memory, plus a file with your names, notes and dates.
"delete everything" removes every file and every record of yours right away. [to decide, once nightly backups exist: deleted records leave them within 7 days]
we keep the exact file your phone made, same bytes, same quality, and we check each one is stored whole before we tell you it's safe to delete it from your phone.
no ad or analytics scripts, and these pages load nothing from other companies (even our typeface is served from here). we never sell or rent your email or anything else.
the one that keeps you signed in. sign-in links and sessions are stored only as fingerprints, so even a leaked database couldn't sign anyone in.
what we keep
- your account: your email, your plan, when you signed up and when you were last here.
- your photos and videos: the original files, their names, sizes and fingerprints, when each was taken and where that date came from (the camera, the file, or you), and a small preview your phone makes for the timeline.
- what you add: the names, dates and notes you give memories.
- the waitlist: just the email you gave us, to write once when it's ready.
who helps us run it
a few companies run the pieces. they store and move your data for us, and can't use it for anything else:
- cloudflare (r2) stores your files.
- neon runs our database.
- vercel runs the website and app.
- resend sends your sign-in emails.
- stripe handles payments. we never see your card number.
where it's stored: [to decide at staging: the region for storage and the database].
how long
for as long as you keep your account. when you delete it, it's gone.
children
treasure box is for adults keeping their family's memories. accounts are for people 13 and older; parents keep their kids' photos in their own account.
changes
if we ever change something that matters here, we'll email you before it takes effect, and the promises above only get stronger.