Privacy & data
Effective September 8, 2026. Operated by HexMobius.
Your family records
The public preview accepts no family files. In the chart engine reserved for paid access, GEDCOM parsing and PDF generation happen on your device. We do not send your family names, dates, notes, filenames, chart titles or project files to a server. Data stays in this tab until it is closed or cleared; it is not automatically saved. Project downloads contain family information, including people hidden on the chart. Store those files privately.
Optional analytics
Only after you allow analytics, Google Analytics and, where enabled, Vercel Web Analytics measure visits and coarse actions: import, prepare, export and price interest. Parameters identify demo versus own data, paper size, generation count and output format, not individual people or records. Google may set analytics cookies; hosting and analytics providers process connection information such as IP addresses and browser information. Analytics is not required to use the tool. Referrer information is restricted to origin for Google, and the recorded page URL omits query text.
Control and retention
Use Analytics preferences below to reset your choice. Declining prevents analytics scripts from loading after the page reloads. This does not delete data previously received by providers. Google event data retention is configured separately in the property; this page does not promise automatic erasure of historical provider records.
Payments
When checkout is enabled, Creem processes your payment, billing details, receipt and purchase key. Card information is entered on Creem, not this website. We store order, checkout, transaction and license identifiers, purchase and expiry times, hashed purchase keys, hashed session tokens and refund/dispute status in a separate Cloudflare database. We do not store card details or family files there. Purchase verification uses essential Secure, HttpOnly cookies, independently of analytics consent.
Security rate limits temporarily use a hash derived from your IP address, not a stored raw IP. Request limits expire after two minutes; the hosting provider may maintain its own network logs. Session tokens expire after at most 30 days and can be invalidated by signing out, refunds or expiry. Order and refund records are retained for access and dispute handling; contact support about deletion or access to your records. Legally required transaction records may need to remain with the payment provider.
Third-party components
Cloudflare hosts the public site and routes support email to our support inbox. If you email us, your email address and message are processed to respond to your request. Please do not include family records or sensitive identity documents. Contact [email protected] about access, correction or deletion of support messages.
GEDCOM parsing uses read-gedcom (MIT). PDF generation uses pdf-lib (MIT) and fontkit. Noto Sans is distributed under the SIL Open Font License. No third-party family database is queried.