Privacy Policy

Privacy Policy

Last updated: 8 August 2026.

Racinage is a private family-records platform developed by Fallax Vision. This policy explains what information we process, why we process it, and how families can control their data.

Information we collect

• Account information, such as name, username, email address, role, language, and security settings.
• Family content added by users, including trees, persons, photos, albums, events, projects, documents, finances, historical stories, comments, and messages.
• Technical data needed to operate, protect, and improve the service.
• Information submitted by public visitors, including contact forms, newsletter signups, live chat, and recommendations on public links.
• Commerce data needed for quotes, orders, reductions, payment proof, commissions, and affiliate payouts.

How we use information

We use this information to provide family workspaces, secure accounts, show authorized records, deliver chosen notifications, respond to support, review manual orders, prevent abuse, improve Racinage, and comply with legal obligations.

Google authentication

If you choose Continue with Google, Google provides Racinage with a stable account identifier, your verified email address, and your account name. Racinage uses this limited information only to create, link, and authenticate your account. Racinage does not request Google contacts or files and does not retain Google access or refresh tokens.

Password screening

When a password is created or changed, Racinage sends only the first five characters of its SHA-1 hash to Have I Been Pwned Pwned Passwords. The password and its full hash are never sent.

Cookies and attribution

Necessary cookies always operate. Analytics and Marketing stay off without consent. Affiliate attribution is stored for thirty days only after Marketing consent; an explicitly entered code may be processed without a referral cookie. Preferences are available in the footer and account settings and can be withdrawn at any time.

Payments and sensitive data

Manual payment references and proof are available only to the relevant customer and authorized super admins. Affiliate payout details are encrypted and displayed in masked form. These records are retained as needed for review, refunds, abuse prevention, accounting, and legal obligations.

Sharing and public access

Family archives are private by default. Managers can create public links, enable APIs, or configure webhooks. In those cases, only the selected resources and options are exposed. Users should review permissions before sharing a link or key.

Retention and security

We keep data while the account or family workspace is active, or as long as needed to provide the service, prevent abuse, resolve disputes, and comply with law. We use session controls, permissions, access limits, and reasonable security measures, but no online service can guarantee absolute security.

Your choices

Users can update account details, notification settings, cookie preferences, public shares, and API connections from their dashboard when their permissions allow it. For privacy requests, contact contact@racinage.com.

Children and family consent

Families may document minors or deceased relatives. Users are responsible for getting appropriate consent and sharing publicly only the information they have the right to share.

Creative library and AI

Public profiles, templates, assets, reviews, comments, reports, entitlements, and qualified-use events are processed to operate the Wedding Planner library. Private designs are stripped of wedding identifiers and personal values before publication. AI prompts and generated assets use plan credits and an editable scene contract; they must not contain real guest data.

Account deletion and messaging retention

An account deletion request locks the account immediately and starts an exact seven-day recovery period. During that period, the account holder can download their data, decide what happens to shared resources, or restore the account. The whole deadline is extended by seven days when a shared resource remains unresolved.

After final deletion, private account data is erased. Resources already transferred to another owner are not deleted. Commerce, refund, moderation, and audit evidence that must be retained may remain in anonymized form. In a conversation with remaining participants, messages and files may be retained while the deleted author is shown as “Deleted User”.

Messaging is encrypted at rest, but is not end-to-end encrypted. Racinage must be able to scan files for malware, provide authorized search and exports, and reveal to moderators only the exact item that was reported.