How Reanimation Lab handles personal information

• Account and identity data: name, username, email, profile image, authentication provider identifiers, verification status, and legal acceptance records.
• Capsule and Future Beacon content: text, photos, video, audio, titles, categories, dates, identity statements, values, relationships, places, preferences, consent selections, links, visibility settings, and file metadata.
• Other people's data: recipient, collaborator, gift, and subject names, email addresses, messages, likenesses, voices, and relationship information provided by users.
• Transaction data: product, price, currency, purchase status, promotion, Stripe transaction identifiers, and limited billing details. Stripe processes full payment-card data.
• Communications: support, privacy, legal, partner, and safety requests and related contact information.
• Technical and usage data: IP address, browser, device, language, approximate region, referring page, logs, timestamps, pages viewed, security events, and cookie or similar identifiers when permitted.

Please do not upload highly sensitive records that are not needed for a capsule. User Content may reveal health, beliefs, family relationships, grief, sexuality, or other sensitive facts even when we do not ask for them.

We collect information from you, from users who invite or mention you, from Google when you choose Google sign-in, from payment and security providers, and automatically from your device. If you provide another person's information, you are responsible for having authority to do so and for giving them any notice required by law.

• Contract: create and secure accounts, store and deliver capsules, manage sharing, process purchases, provide support, send lifecycle notices, and carry out requested features.
• Legitimate interests: prevent abuse, maintain service integrity, understand aggregate performance, improve features, establish legal claims, and communicate important service information, balanced against individual rights.
• Consent: optional analytics and marketing technologies and other processing where consent is required. Consent can be withdrawn at any time.
• Legal obligations: tax, accounting, sanctions, consumer protection, lawful requests, and security or fraud obligations.

We do not use capsule or Future Beacon content to train a general-purpose artificial intelligence model.

Paid capsules have optional annual anniversary reminders enabled by default. The capsule owner can turn those reminders off while creating or editing the capsule. Payment deadlines, expiry notices, unlock messages, and security emails are operational service communications.

Essential cookies and local storage support authentication, fraud prevention, security, and saved choices. They cannot be disabled through our preference tool.

Google Analytics loads only after analytics consent. Meta Pixel loads only after marketing consent. These providers may receive device, browser, IP, page, event, and cookie identifiers and may process them under their own policies. You can reject either category without losing core account functions and reopen “Cookie settings” from the site footer.

We treat a supported Global Privacy Control signal as an opt-out of marketing tracking. We do not sell personal information for money. Some laws may define consented advertising measurement as “sharing” or targeted advertising; you may opt out at any time through Cookie settings.

• People you choose: recipients, collaborators, gift recipients, public visitors, or anyone with an access link may receive content according to your settings.
• Processors and providers: hosting and delivery infrastructure; Supabase for database and media storage; Stripe for payments; Resend for email; Google for sign-in and consented analytics; Meta for consented campaign measurement; Cloudflare Turnstile for abuse prevention; and professional advisers where necessary.
• Legal and safety: authorities or affected parties when reasonably necessary to comply with law, protect rights and safety, investigate fraud, or enforce agreements.
• Corporate events: a buyer, investor, lender, or successor in a merger, financing, reorganization, or sale, subject to appropriate confidentiality and continued legal protection.

Prisma is software used to operate our database and is not described as a separate recipient of your information.

Capsules are private by default in the product settings, but privacy depends on the choices users make. Links and QR codes can be copied or forwarded, recipients can capture content, and public capsules and comments can be indexed or redistributed. Do not share an access link with someone who should not have it.

Free capsules are scheduled for removal 14 days after creation. We email the owner one week before that deadline. Paid capsules and Future Beacons are retained while needed to provide the requested long-term service or until deletion, account closure, or discontinuation. We retain account, support, security, legal, and transaction records only as long as reasonably needed for their purpose or required by law.

Verification codes expire quickly. Deleted information may remain temporarily in restricted backups and logs until normal overwrite cycles complete. We may retain minimal records to document a request, prevent fraud, resolve disputes, or comply with law.

Depending on where you live, you may have rights to know or access, correct, delete, restrict, object, withdraw consent, receive a portable copy, opt out of sale/sharing or targeted advertising, appeal a decision, and complain to a regulator. We will not discriminate against you for exercising a privacy right.

Submit a request to [email protected] with “Privacy Request” in the subject. Describe the right and the account or content involved. We may verify identity and authority, and authorized agents may be asked for signed permission. We will respond within the period required by applicable law.

California residents may request the categories, sources, purposes, and recipients of covered information; request access, correction, or deletion; and opt out of sale or sharing. We do not knowingly sell or share the personal information of people under 16.

Reanimation Lab operates from Toronto, Ontario, Canada, and providers may process information in the United States and other countries. Where required for transfers from the EEA, United Kingdom, or Switzerland, we rely on adequacy decisions, approved contractual clauses, or another lawful transfer mechanism. Local laws in a destination may differ from those where you live.

Accounts are for adults and the Services are not directed to children under 13. We do not knowingly collect personal information directly from a child under 13. If you believe a child created an account or provided information without lawful parental authorization, contact us so we can investigate and delete it where appropriate.

Adults uploading a child's image, voice, story, or contact information must have lawful authority and should choose the most private settings suitable for the purpose.

We use safeguards designed for the nature of the Service, including access controls, encrypted network transport, provider-managed encryption at rest, authentication protections, backups, and monitoring. Capsule content is not represented as end-to-end encrypted. No system is completely secure, so keep independent copies and contact us if you suspect unauthorized access.

We do not use personal information to make solely automated decisions that produce legal or similarly significant effects. Automated systems may help with spam, fraud, security, and service operation.

We may update this Policy and will post a new effective date. Material changes will receive additional notice where reasonably required.

Reanimation Lab is responsible for the practices described here. Contact [email protected]. You may also complain to the Office of the Privacy Commissioner of Canada or the privacy or data-protection authority where you live.

See our Terms of Service and Refund Policy.