Privacy notice

Version 1.0 · in force since August 8, 2026 · W.B.Child Association

Who we are

The data controller is W.B.Child Association, Calatafimi Segesta (TP), Italia, Italian tax code 93073700812.

For anything concerning your data, write to info@wbchild.it.

We have not appointed a Data Protection Officer, as none of the conditions in Article 37 of the GDPR apply. Requests come straight to us.

The short version

Your photographs stay on our servers and nobody outside your family sees them.
There are no ads, we don't sell data, and we don't hand it to advertising intermediaries.
We don't use face recognition and we don't analyse images to identify people.
Two cookies, both technical: no tracking, so no banner.
You can download everything and delete your account yourself, from the “Your data” page.

What we collect

Only what the service needs to work.

For the account: Name, email address, password (stored as a one-way hash — we cannot read it), chosen language, profile colour, creation date, and the IP address you opened the trunk from.
The photographs: The files you upload and the technical data inside them: capture date and time, GPS coordinates if your phone recorded them, camera model, dimensions. We also compute a numeric fingerprint of the image to spot duplicates, and a sharpness score to pick the better shots.
What you write: Captions, moment descriptions, story text, family chat messages, trip ideas and the answers to them.
Print orders: Delivery name and address, email, phone if you give one, and the details of the book. Card details never pass through us: Stripe collects them directly on its own page.
Consents: Date, time, IP address and the version of the documents you accepted.
Technical logs: The server records accesses with IP address, timestamp and requested page. They keep the site running and help spot abuse.

We do not collect health data, political opinions, religious beliefs, sexual orientation or biometric data. If such information appears in your photographs, to us they remain images like any other: no system analyses them.

Why, and on what legal basis

To provide the service: Storing photos, organising them, building books and shipping them. Legal basis: performance of the contract formed when you open a trunk (Art. 6(1)(b) GDPR).
To keep the service safe: Limiting abuse, spotting unauthorised access, keeping logs. Legal basis: our legitimate interest in protecting the service and its users (Art. 6(1)(f)).
To meet legal obligations: Keeping invoices and records of paid orders. Legal basis: legal obligation (Art. 6(1)(c)).
For the automatic story narrator: Only if you switch it on, and only then. Legal basis: your consent (Art. 6(1)(a)), withdrawable at any time by turning the feature off.

We do not profile you, we make no automated decisions about you, and we send you no advertising.

Who else sees anything

Nobody receives your data for their own purposes. Some providers process it on our behalf, under a contract that binds them:

The server provider: Hetzner Online GmbH (Germania / Finlandia). This is where the photographs and the database live. Servers in the European Union.
Stripe: Only when you buy a book. It receives the amount, your email and the payment details, which it collects directly. Stripe is in the United States: the transfer relies on the Standard Contractual Clauses approved by the European Commission.
The email service: Receives your email address and the content of the service messages we send you.
OpenStreetMap: Receives only geographic coordinates rounded to roughly one kilometre, and returns the name of the place. It receives nothing that identifies you, and no photographs.
The language model provider: Only if you enable the automatic narrator. It receives dates, counts, place names and the captions you wrote. Photographs never leave. The provider is in the United States, under the same Standard Contractual Clauses.
The print shop: When you order a book, it receives the file to print and your delivery address.

We disclose data to authorities only where the law requires it.

Other households in your tree

You can link your trunk to other households. Joining a tree shares nothing. You decide, per tree, which categories become visible — photographs, moments, stories, trips, places. All start switched off.

What you switch on becomes visible to the households in that tree, read-only: they cannot edit, download originals, or use your photos in their own books. Unchecking stops the sharing immediately, and leaving the tree deletes every sharing setting.

Photographs of other people

When you upload a photograph showing other people, that is your decision. Within your own family this normally falls under personal and household use. If you share with other households through a tree, or order a print destined for someone else, consider whether the people pictured would agree.

On photographs of minors: whoever uploads them must hold parental responsibility or the consent of someone who does. We do not analyse them, we do not index them by face, and we never show them outside the perimeter you set.

How long we keep it

Account and photographs: For as long as your trunk is open. If you delete the account, your data is removed as described below.
The trash: Photographs you move to the trash stay recoverable for 30 days, then they are genuinely deleted from disk.
Data archives you request: Seven days, then the file is removed from the server.
Records of paid orders: Ten years, as Italian accounting law requires. They remain with no link to your name once you delete the account: this is the only exception to the right to erasure, and we state it openly.
Server technical logs: Twelve months at most.
Consents: For the life of the account and as long as needed to defend a possible claim.

What happens when you delete your account

Deletion is requested from the “Your data” page. It requires your password and a typed confirmation, and runs after seven days: until then you can change your mind, and we email you a way to call it off.

If you are the only person in the trunk, everything goes: photographs, files on disk, moments, stories, books.

If other family members remain, the photographs stay with them — they are shared memories, not one person's data — and pass to another administrator. What does go is your chat messages, the hearts you gave, your trip answers, and your access.

Your rights

You may exercise the rights in Articles 15 to 22 GDPR at any time:

Access and portability — the “Your data” page builds an archive of everything about you, readable both by software and by a spreadsheet.
Rectification — name, email and captions you can correct directly in the app.
Erasure — from the same page, without having to ask anyone.
Restriction and objection — write to us and we stop that processing.
Withdrawal of consent — if you enabled the automatic narrator, switching it off withdraws it. What was already done remains lawful.

We answer within thirty days. If you think something is wrong you may complain to the Italian Garante per la protezione dei dati personali (garanteprivacy.it) or to the authority in the country where you live.

If you live in California or another US state

If you are a California resident, the CCPA and CPRA give you the right to know which categories of personal information we collect, to obtain a copy, to request correction or deletion, and not to be treated differently for asking.

The categories we collect are those listed above: identifiers, contact information, content you upload yourself, purchase records, and technical connection data.

We do not sell and do not share personal information in the sense the CPRA gives those words, and never have. There is no behavioural advertising, no ad intermediaries, no tracking pixels.

To exercise these rights use the “Your data” page or write to us. You may appoint an authorised agent; in that case we must be able to verify the authorisation.

Cookies

We use two, both strictly necessary and therefore exempt from consent:

Session cookie: Keeps you signed in as you browse. It disappears when you close the browser.
Language cookie: Remembers whether you prefer Italian or English.

There are no analytics or profiling cookies, ours or anyone else's. That is why you see no banner: there is nothing to authorise.

Security

The site is served over HTTPS.
Passwords are stored with a slow hash and an additional secret value: not even we can recover the original password.
The folders holding photographs execute no code and cannot be browsed from outside.
Exported data archives are not reachable by direct URL: a check verifies who you are first.
Card details never transit our servers at any point.

Should a breach occur that poses a risk to your rights, we notify the supervisory authority within seventy-two hours and you without undue delay, as Articles 33 and 34 require.

Minimum age

You must be at least fourteen to open a trunk — the threshold Italy has set for digital consent. A parent may of course keep photographs of their minor children in their own trunk; in that case the account holder remains the parent.

If we change this document

When we change this notice substantially, we raise the version number and flag it in the app. The version you accepted stays on record in the “Your data” page, so you always know what you agreed to.

Back to the trunk Terms of use