Privacy Policy

Last updated: 2026-05-22

What this is

Know My Family is a family tree builder. You enter people, relationships, dates, and optional photos; the tree is yours to view and edit. This page is an honest accounting of what data we touch and what we do with it.

What we collect

We only collect what we need to make the app work for you. Specifically:

Your email address, via Google Sign-In, when you choose to sign in. The email is the key we use to store your tree against. We do not see your Google password, only your email and the OAuth token your browser exchanges for it.
Your tree contents: the names, dates, notes, relationships, and card positions you enter. Photos you upload are stored as-is. This is the data you put in; we don't analyze it.
An optional anonymous tree kept entirely in your browser's local storage when you use the app without signing in. We never see this version — it lives on your device.

What we don't collect

No analytics or page-view tracking.
No advertising IDs, ad-network cookies, or behavioral profiling.
No IP address or device fingerprint beyond what standard web-server access logs record (which we treat as operational data, not identity data).
No location data beyond what may be inferable from the IP in those access logs.

Where your data lives

Trees and photos are stored on Google Cloud — the application backend runs on Cloud Run, and tree data + photos are written to Cloud Storage. Files are keyed by a one-way hash (SHA-256) of your email, so the storage layer never sees your email in plaintext.

Local-only trees (anonymous mode) sit in your browser's localStorage under the key family_tree_v1. Clearing your browser's site data wipes them.

Share links

The Share feature creates a 24-hour edit link tied to a specific person in your tree. Anyone with the link can edit the tree until it expires. The link is signed with our server's secret so it can't be tampered with, but it is a capability — share it only with people you trust to edit your tree.

Cookies

We use two cookies:

family_tree_session — your sign-in. Set after a successful Google OAuth exchange, expires after 30 days, HTTP-only, secure in production.
family_tree_oauth_state — a short-lived (5 minute) CSRF protection cookie used only during the sign-in handshake.

No advertising or analytics cookies are set by us.

Deleting your data

To delete a tree, sign in and use the "Clear All" menu item — that empties the tree on the server. To delete photos, remove them from individual people via the edit dialog. To delete the local anonymous tree, clear site data in your browser.

To request full account deletion (your email and any data keyed to it), email john@dopazo.com with the subject "Delete my Know My Family data".

Third parties

We use Google as a sign-in provider and Google Cloud as our hosting platform. Their privacy practices apply to that portion of the data flow; see Google's Privacy Policy. We do not embed third-party ads, social widgets, or trackers.

Changes

If we materially change what we collect or how we store it, this page will be updated and the "Last updated" date will move. There's no mailing list to notify you, since we don't have your address.

Contact

Questions or concerns about this policy: john@dopazo.com.