Last updated: October 2026
Short version: We collect only what's needed to run your family's journal and share none of it. Below is the full, honest list of what we store, table by table - not a vague summary. We're a small, independent business run by a real person. Your trust matters more than your data.
Offline Rituals is run by Panorama Faustoso LDA (NIPC 516512404), a company registered in Portugal. If you have questions about this policy, you can reach me at support@offlinerituals.com.
Rather than a vague summary, here's exactly what we store, grouped by what it's for. Nothing here is sold, rented, or shared for advertising - it exists only to run the product.
Your account (sign-in). When you sign up, we store your email address. If you subscribe, we store a Creem customer reference so we can look up your subscription status - we never see or store your full card number, that lives with Creem.
Your family and journal. When you set up a family archive, we store your family's name and, if you turn on the monthly text, a US mobile number and a record of your consent (when you agreed, from which IP address, and which wording you saw). For each family member you add, we store the name you give them, whether you've marked them as a child, and their birth year (optional, used only to personalize ritual suggestions - see our children's privacy page for more). For every ritual entry or free-form memory you save, we store the text you write, who you tag as having said it, a mood label, any note you add, and any photo or voice recording you upload, along with your family's list, the pages you fill in for each ritual ("What we made"), and the names of the people at your First Gathering if you played it before signing up.
What you agreed to. When you buy a plan we record the renewal terms shown to you, that you ticked the box agreeing to them, the Terms and this policy, and that you're 18 or older and a parent or guardian - with the time, your IP address and the exact wording. When you set up your family we record the same age and terms confirmation. See Data retention for how long these are kept.
Free Ritual (no account yet). If you try a ritual before creating an account, we temporarily store your in-progress answers and, if you provide it, your email address, tied to an anonymous browser session - so you don't lose your progress and so we can carry it into your account if you sign up. You can ask us to delete this at any time by emailing support@offlinerituals.com.
That's the complete list. We don't collect physical addresses or demographic information, and we don't use Google Analytics or build advertising profiles.
We use PostHog for product analytics to understand how people use Offline Rituals and improve it. In the EU, the EEA and the UK - or wherever we can't tell where you are - analytics only run after you accept cookies in the banner; anywhere, you can turn them off under Cookie settings at the foot of every page. See our cookies page for the full list of cookies this involves. On this public website that includes page views, clicks and session replays (which mask everything typed into forms). Inside the app - your family's journal - we record only which pages are visited, without any address parameters, and a few product events: no session replays, no click tracking, and nothing you write, upload or name. Our servers also send PostHog a report when something breaks - what failed and where, with email addresses and phone numbers removed and nothing that identifies you or your family.
We use a small number of trusted services:
Your journal - memories, photos, voice notes, and the names of the people in your family - is stored with Cloudflare and sent to none of the other services. Creem gets your email and name to take payment; Resend gets your email, your family's name and what an email needs (a date, a link, a gift note you wrote for someone).
We never sell your mobile number, and we don't share it or your text-message consent with third parties or affiliates for their marketing. Reply STOP to any text to stop them.
We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes.
Each of these services has their own privacy policies and maintains appropriate data protection standards. Email sent through Resend on our behalf - magic links, ritual delivery, receipts - is authenticated with SPF, DKIM, and DMARC on our sending domain, so mail claiming to be from Offline Rituals can be verified as genuinely from us.
If you're in the EU (or anywhere, really), you have the right to:
Transactional emails - including sign-in links, receipts, and deletion confirmations - are necessary to provide the service, so we send them without marketing consent under the GDPR Recital 50 exemption. You cannot unsubscribe from these emails while you hold an account.
You can do two of these yourself, any time, in the app's Settings: Download my data emails you a link to a ZIP with your family's journal as a page you can open in any browser, every photo and voice recording, and a file of everything we hold about your account, and Delete my account erases it immediately (see Data retention for backups).
To exercise any of these rights, email support@offlinerituals.com. I'll respond within a few days.
When you sign in, your session stays active for 30 days and quietly refreshes every 24 hours you're active, so you're not asked to sign in again mid-visit. Signing out, or simply not returning for 30 days, ends it. Each session records the IP address and browser it was started from; once it ends, it is deleted within a day, and so is a sign-in link once it has expired. To stop abuse - repeated sign-in attempts, checkouts or messages - we briefly keep a count of recent requests per IP address; those counts are deleted within two days.
Offline Rituals is for parents and families. Accounts are for adults only: whoever creates one confirms they are 18 or older and a parent or guardian of any child they add. Children don't hold accounts of their own, and we don't knowingly collect information directly from children under 16 - a child's name, birth year, words, photos or voice appear only if a parent or guardian adds them to the family's journal. We never send any of it to advertising, analytics or AI services. See our children's privacy page for details, including how a parent or guardian can request removal of a child's data.
If we make significant changes, we'll email subscribers and update this page. Minor clarifications won't trigger notifications.
Email support@offlinerituals.com. I read every message.