Privacy Policy
Last updated: May 9, 2026
TL;DR.Memory of Ord collects only what’s needed to sign you in, store the work you create, and keep the Service running. Your data isn’t sold, and isn’t shared with advertisers or any other third party beyond the services needed to run the Service. Your content belongs to you. The longer policy below says the same thing in the language regulators around the world expect — it’s there for compliance, not to slip anything past you.
Memory of Ord is run by a single individual based in California, USA. This policy explains what personal information the Service collects, why, and what choices you have. Questions? Email memoryoford@gmail.com.
What is collected
Account information (Clerk). Sign-up and sign-in are handled by Clerk. You can sign up with an email and password, or with a supported social sign-on (such as Google). Memory of Ord doesn’t ask for any extra information at sign-up beyond Clerk’s defaults — typically your email address, your name if your provider supplies it, and a profile picture if you have one. Passwords and other credentials are handled and stored by Clerk, not by Memory of Ord. An account is required to use the Service.
Your content. Anything you create on the Service belongs to you, and is used only to operate the Service for you.
Usage analytics (PostHog). Memory of Ord uses PostHog (US cloud) to record page views and a small number of custom events related to product usage. PostHog may set cookies and capture your IP address, browser, and device attributes. Session replay and form-input recording are not enabled.
Server logs (Vercel). Memory of Ord is hosted by Vercel, which logs basic request metadata (IP, user-agent, URL) for security and reliability. This is standard practice for any web host.
Why this data is collected
Under the EU and UK GDPR, each kind of processing relies on one of the legal bases below:
- Account and content data— necessary to provide the Service to you (Article 6(1)(b), performance of a contract).
- Analytics and server logs— to understand and improve the Service and to keep it secure (Article 6(1)(f), legitimate interest).
Who sees this data
Your data is shared only with the processors listed above (Clerk, PostHog, Vercel, and the database hosting provider), each strictly to operate the Service. Your data is not sold, rented, or shared for advertising or any other purpose unrelated to running the Service. There are no advertising partners. No personal information has been sold or shared for monetary or other valuable consideration in the past twelve months.
Information may be disclosed if compelled by valid legal process (e.g., a subpoena). Where lawful, you will be notified if this occurs.
International transfers
All processors above are based in or operate primarily from the United States. If you are in the European Economic Area, the United Kingdom, Switzerland, or another jurisdiction with cross-border transfer restrictions, your data is transferred to and processed in the US. Each processor offers Standard Contractual Clauses (SCCs) or equivalent safeguards as part of its terms.
Cookies and similar technologies
Two categories of cookies and local storage are used:
- Strictly necessary— Clerk uses cookies to keep you signed in. The Service cannot function without these.
- Analytics— PostHog uses cookies to count unique visitors and de-duplicate events.
Memory of Ord does not currently show a cookie banner. You can disable cookies through your browser settings; analytics will degrade but the Service will continue to function for signed-in users. Memory of Ord honors the Global Privacy Control (GPC) signal as a valid opt-out where it applies — though, as noted above, there is no sale or sharing of personal information to opt out of.
How long data is kept
- Account and content data— kept until you delete your account. After deletion, content is removed from the live database within a reasonable period, and copies in encrypted backups age out shortly thereafter.
- Analytics events— retained per PostHog’s default retention.
- Server logs— retained per Vercel’s defaults (typically days to weeks).
Your rights
Depending on where you live, you may exercise some or all of the following rights with respect to your personal data:
- Access— request a copy of your personal data.
- Correction— ask for inaccurate data to be corrected.
- Deletion— ask for your data to be deleted (you may also delete your account directly).
- Portability— request a machine-readable export of the data you have provided.
- Restriction or objection— limit or stop specific uses.
- Withdraw consent— where processing relies on consent.
To exercise any right, email memoryoford@gmail.com. A response will follow within 30 days. EU/UK residents may also lodge a complaint with their local data-protection authority. California residents have the rights set out in the CCPA/CPRA, including the right to non-discrimination for exercising those rights; the right to opt out of sale or sharing does not apply because no sale or sharing occurs.
Automated decisions
No automated decision-making (including profiling) that produces legal or similarly significant effects on you is performed.
Children
The Service is not directed to children under 13 and does not knowingly collect personal information from anyone under 13. By creating an account, you confirm that you meet the minimum digital-consent age in your country of residence — generally 13 in the United States and 16 in parts of the European Union. If you believe a child has provided personal information through the Service, email memoryoford@gmail.com and the report will be reviewed and acted on as appropriate.
Security
Memory of Ord relies on Clerk, the database hosting provider, Vercel, and PostHog for the security of the data each one handles. These providers use industry-standard protections (encryption in transit, encryption at rest, access controls). No system is perfectly secure. If a breach occurs that affects your data, you will be notified in line with applicable law.
Changes
This policy may be updated from time to time. The “Last updated” date at the top reflects the most recent change. Material changes will be communicated by email or an in-app notice when feasible.