Privacy Rights Request

Introduction

You have rights over the personal information we hold about you. This page explains how to exercise those rights and what we need from you so that we can act on your request safely. Missing Them Forever honors privacy rights for all visitors, regardless of where you live, including under the EU's General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

We will respond to verified requests within 30 days. There is no charge for exercising your privacy rights.

Your Rights

You may request that we:

• Access — provide a copy of the personal information we hold about you.
• Correct — fix inaccurate or out-of-date personal information.
• Delete — erase your account and the personal information associated with it. Public memorial content you created may be retained in anonymized form unless deletion is also requested.
• Export (portability) — provide your data in a structured, machine-readable format (JSON).
• Restrict or object — limit how we process your information, or object to specific processing.
• Opt out of “sale” or sharing — note that we do not sell or share personal information with third parties for advertising. This right is included for completeness.
• Withdraw consent — for any processing that relied on your consent (e.g. SMS-based MFA).
• Lodge a complaint — with your local data-protection authority (e.g. an EU supervisory authority, the California Privacy Protection Agency).

How We Verify Your Identity

To protect your information from unauthorized disclosure or change, we require enough information to be reasonably certain that you are the account holder. The minimum we ask for is the information already on file with your account:

• The email address registered to your account.
• Your public nickname, if you have one.
• Your first and last name as entered at registration.
• For requests involving a mailing address, your full mailing address as last entered (so we can match what we have on file).

We may follow up with a confirmation email sent to the address on file before acting on your request. If we cannot verify your identity within a reasonable period, we may decline the request and ask for additional information. We will never ask for your password.

How to Submit a Request

Send your request through our contact form. Include the following so we can act on it without delay:

1. Request type — one of: access, correction, deletion, export, restrict / object, opt-out, or withdraw consent.
2. Identity verification information — the items listed in the section above.
3. Description — what specifically you would like us to do (for example, “Please delete my account and all memorials I created.”)
4. Authorized agent (CCPA) — if you are submitting on behalf of another California resident, attach written, signed authorization from that person.

You may also submit your request by postal mail to the address on our contact page.

Appeals and Non-Discrimination

If we deny your request in whole or in part, you may appeal by replying to our response or by submitting a new request through the contact form marked “Privacy Request Appeal”. We will not discriminate against you for exercising any of these rights — your access to our services will not be affected.