Operator note: replace the bracketed details below with your organisation's legal name, address and contact email before going live, and have the policy reviewed against the Namibian Data Protection framework and, if you have UK or EU users, the UK/EU GDPR.
Who we are
Our Memories is operated by [Organisation name], [address], Namibia. Contact: [privacy@your-domain].
What we collect
- Organisers: name, email address, a securely hashed password, and the books you create.
- Contributors: the name you enter, optional relationship and email, the photographs and messages you submit, and the time you gave consent. No account is created.
- Technical data: a keyed hash of your IP address (used for security and rate limiting — we do not store the raw address) and essential session cookies.
How photos are protected
Photographs are stored outside the public website and are only delivered after an access check. Location data and other camera metadata (EXIF) are removed when a photo is uploaded. Private books are reachable only through long, random links; password-protected books also require a password.
Who can see your contribution
Only the book's organiser can see a contribution until they approve it. Once the book is published, approved photos and messages are visible to people who have the book's viewing link (and password, if set). You can choose whether your name appears in the book.
Children and sensitive photos
Please only upload photos you have the right to share, and ask a parent or guardian before submitting photos of children. Organisers can remove any contribution at any time, and anyone can ask us to remove content.
Cookies
We use one essential session cookie to keep you signed in and to protect forms. We do not use advertising or tracking cookies.
Retention and deletion
Books and photos are kept until the organiser deletes them or closes their account. Contributors may ask the organiser — or us at [privacy@your-domain] — to remove their contribution. Deleted photos are removed from our storage.
Your rights
You may request access to, correction of, or deletion of your personal information by contacting [privacy@your-domain].