Family archive
Privacy & accounts
Updated October 16, 2026. This page describes the current website features and how personal information is used; not every historic record has been independently verified.
Signing in
Accounts use Supabase authentication. Email-link sign-up asks for your full name and email. When enabled, Google or Facebook supplies basic account information such as your name and email after you authorize sign-in. The family website does not receive your Google or Facebook password.
Your family connection
You may give the name of a relative or state that your own name is in the tree. Name matches are suggestions for organizers, not proof of identity. New accounts do not automatically receive private family access. An approved relative can invite someone using a private, single-use link tied to the recipient’s confirmed email. This verifies family membership without requiring an organizer, but it does not claim ownership of an existing family-tree profile. Those without a trusted invitation can submit a private family connection for review. Connection requests and candidate matches are not public.
Reunions, announcements, and discussions
Reunion plans, dates, locations, discussions, photographs, and event announcements are restricted to verified family accounts. Drafts remain organizer-only. Reunion event data is not published to public visitors. Family members can remove their own discussion posts, and organizers can moderate posts. Content is stored in Supabase.
Your personal profile sharing
Google and Facebook account information is used for sign-in and is not automatically added to the family directory. In My privacy choices, you can opt in separately to showing your chosen display name, provider profile picture, sign-in email, short introduction, general area, and birthday month/day to verified family members. Every sharing choice defaults to Only me. There is no public sharing option for these personal member profiles. You may change your choices at any time; opting out removes the corresponding detail from future family-directory results. Only members who explicitly share their name appear in that directory.
Historical records from the family binders are separate from your optional personal account profile. Historical profiles of deceased relatives may be publicly available where deliberately approved, but records of living or unverified individuals remain protected. Changes to a linked historical record, family stories, images, and milestones require a separate review; changing personal account sharing settings does not rewrite the archive. To request a restriction or correction, use Account & data requests.
Archive AI
Ordinary search and reunion discussions are not sent to an AI provider. The optional archive AI sends only your current question and selected public genealogy records to Groq after the consent control is enabled. Do not put confidential information in an AI question. AI can make mistakes; check its linked records. Chat conversation state is kept in the current browser tab rather than stored as a database transcript by this feature.
Service providers
The website is hosted on Vercel, with accounts and database records in Supabase. Those services may retain operational and security logs under their own policies. Google, Facebook, and Groq process information when you choose their respective features.
Corrections, retention and deletion
Account deletion, stored-post removal, and review of a historical genealogy record are separate requests. You can ask us to remove account information obtained through Facebook, Google, or email sign-in even if you cannot sign in again. Please follow our data deletion instructions or read about account and data requests. Account deletion is currently processed manually by a site organizer; no automatic account-deletion button is implemented yet. Historical archive records about other relatives or scanned original documents may require an independent review.