YOUR STORIES ARE PERSONAL
How Al&Sha LLC handles your family stories. Updated October 23, 2026.
The details, chapter edits, dedication, and photos you submit are stored to prepare your book. New digital orders, images, generated PDFs, and memory videos are encrypted on the server. Memory videos are created locally from the photos in your purchased book when you request one. Temporary rendering files are removed after generation. Image location metadata is removed during upload. The operator’s access to the server and encryption key still needs to be protected.
A private browser cookie grants access to your story. A recovery code lets you restore that access on another device. Anyone with this code can access your book: keep it private. An order number alone does not grant access. Recovery on another browser replaces access from the previous browser.
The form draft is saved in this tab’s session storage and cleared after a successful preview. Selected photos are held in the tab and must be selected again after a reload. The browser remembers your language preference and the last order identifier. The recovery code remains in the originating tab until you close it; save the recovery file before leaving.
To understand how many people start and finish a book, our own server keeps daily totals: visits, page views, books started, previews, approvals, checkouts and purchases, and for each new visit only the name of the website or campaign it came from (for example "pinterest.com"), never the full address. There are no analytics cookies, no tracking scripts and no third-party analytics. IP addresses are never stored: visits are told apart for one day only, using a value that is discarded every day and cannot be traced back to you. The totals contain no names, emails, stories or photos.
Your supplied memories are organized into editable chapters. Where local writing assistance is enabled, that private local service receives the source text; there is no fallback to an external AI provider. Original wording is preserved when assistance is unavailable. Stripe processes card payments, our self-hosted BTCPay Server handles Bitcoin payments, and Cloudflare provides website delivery and transactional email. We do not sell your family content or use it for advertising. Stripe receives the checkout details, an internal order identifier, the edition number, and the amount. Family stories and photos are not included in payment metadata. Card details are entered on Stripe’s hosted page, not on MyMemory. For Bitcoin, our BTCPay Server receives the same order identifier, edition number and amount, plus the email you choose to give for delivery; Bitcoin transactions are public on the blockchain.
The email address returned by a verified Stripe or BTCPay payment is stored with the encrypted order to prepare a delivery confirmation. You can also explicitly request a one-time preview email before purchasing. Cloudflare sends our transactional emails. The email provider receives the address, order reference, amount, page count, and private access link; family stories and photos are not attached. The link expires after 72 hours and works once. Opening it on another browser replaces previous browser access.
Unpurchased drafts are removed after 90 days without a saved change. Purchased books are stored for one year after payment so you can download them again. You can request content deletion sooner from your private book dashboard or by contacting [email protected]. Deletion removes your story, photos, PDFs, slideshow, and access links. A minimal encrypted payment record may be retained for accounting, dispute handling, and legal obligations. Encrypted backups rotate within 30 days; deleted content may remain there until rotation and is not used for ordinary access. Do not send your recovery code by email.