Privacy policy

Famologist is a small product built around a simple idea: the people in your life are more interesting than what advertisers think you should care about. We treat your data the way we'd want ours treated.

Famologist is operated by Deseret Consulting Corp, a Utah corporation. This page describes how we handle your information.

What we collect

• Account: email, optional display name, password hash.
• Roster: the names, dates, places, and attributes you add about your family or friends.
• Game state: which sessions you've played, who joined, scores.
• Billing: subscription tier and Stripe customer/subscription identifiers. We never see your card number — Stripe handles that.
• Server logs: request paths, response codes, IP, timestamps. Retained as needed to operate and debug the service — typically 30 days.

What we don't do

• We do not sell your data. There is no advertising on Famologist.
• We do not share roster data with any third party. The genealogy stays on our server.
• We do not run third-party analytics or tracking scripts. The only cookies are the session cookie and the CSRF token.

Who we share with

Three vendors process data on our behalf, each scoped to one job:

• Stripe — handles all payment and subscription processing.
• SendGrid — delivers transactional email (sign-in links, password resets, contact-form receipts).
• Fly.io — runs the app servers and hosts the encrypted database.

Your rights

You can:

• Export your roster as CSV or GEDCOM from the People page.
• Delete your account and all associated data from your Settings page. Deletion is immediate and irreversible — your roster, sessions, and subscription are wiped together.
• Email us at contact@famologist.com for anything else.

EU and California residents

If you live in the European Union, you have additional rights under the General Data Protection Regulation (GDPR) — including the right to access, rectify, restrict, or object to processing of your personal data, the right to data portability, and the right to lodge a complaint with your local supervisory authority.

If you're a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) — including the right to know what personal information we hold about you, the right to delete it, and the right to non-discrimination for exercising those rights. We do not sell or share your personal information.

To exercise any of these rights, email contact@famologist.com — we'll respond within 30 days.

Security

Traffic to the site is HTTPS-only. The database storage is encrypted at rest by our hosting provider (Fly.io). Passwords are bcrypt-hashed. Server access is restricted to project maintainers.

If we ever discover a breach affecting your data, we'll notify affected users by email within 72 hours of confirmation.

Children

Famologist is not designed for children under 13. We don't knowingly collect data from accounts belonging to children under 13. If you believe such an account exists, email us and we'll remove it.

Changes

When we update this policy in a material way, we'll email registered users at least 14 days before the change takes effect.

Contact

Questions, requests, or formal notices about this policy go to contact@famologist.com . Famologist is a service of Deseret Consulting Corp, a Utah corporation; our business filing is on record with the Utah Division of Corporations .