Emigrant Ledger

Privacy

Your GEDCOM file. A family tree contains personal information about living people, so we treat it as sensitive. When you upload a file it is read into memory, analysed, and discarded when the report is sent. It is never written to disk. If you start a Clean & Convert purchase, the file is held in memory for at most 60 minutes so that the cleaned copy can be produced after payment, and it is deleted the moment the download is delivered (or when checkout is cancelled or times out). Nothing in the file is logged, mined, or used to train anything. We keep only aggregate counters (how many checks were run).

Payment. Payment is handled by Stripe Checkout on Stripe's pages; card details never reach our servers. Stripe sends us your email address and the payment status so we can deliver the download and honour refunds.

Hosting and processors. This service runs on Railway. Our other processors are Stripe (payments), Etsy and Gumroad (template storefronts) and Gmail (support email).

Cookies and analytics. None. Server logs record request paths and timing, not file contents.

Contact. Reply to any receipt email, or use the support address in the footer, to ask questions or request deletion of anything we hold (which, for files, is nothing).