Privacy & Cookies

Heirloom is built around family memories, so we treat your data conservatively. This page explains, plainly, what we collect and why.

What we measure

With your permission, we record which pages you visit, which buttons you click, and roughly where in the world you are, so we can see where people get stuck and improve the experience. Each visitor gets a random ID stored in a cookie, and if you create an account we link that ID to your account so we can understand the full journey.

What we never record

We never record what you type. Your story text, character notes, names, photos and any form fields are masked out of all behavioural analytics and session replays.

We never store your raw IP address. It is converted into a one-way scrambled value used only to spot bots and duplicate visits — it cannot be turned back into your IP.

Tools we use

Our own analytics stored in our database, plus PostHog (product analytics and masked session replay), Google Tag Manager and the Meta Pixel for measuring advertising. None of these load until you press Accept.

How long we keep it

Behavioural analytics are automatically deleted after 12 months. Your account, stories and orders are kept for as long as you have an account — email us to delete them at any time.

Your choice

You can change your mind whenever you like. Your current setting is not set.