Privacy Policy

What We Collect

We collect your email address, surname, and optional family details that you provide during checkout. Payment information is processed securely by Stripe and is never stored on our servers.

How We Use Your Information

Your information is used to generate your heritage report, deliver it to your email, and process your payment. We never sell or rent your personal information.

We share the minimum necessary with the services that run the site: Stripe (payments), Supabase (report storage), Resend (email delivery), and OpenAI and Replicate, which generate your report text and coat of arms from the details you provide. None of them are advertising companies and none receive your data for their own marketing.

Data Storage

Your report data is stored on Supabase. Your report files are kept in private storage and are reachable only through a time-limited link issued after we verify you are the person who ordered them — knowing an order number is not enough. Payment processing is handled by Stripe, and we never see or store your card details.

Cookies and Analytics

We use essential cookies to keep your order working as you move through the site. Those are always on and cannot be declined, because without them your report would not reach you.

If you accept our cookie notice, we also load Google Analytics and the Meta (Facebook) Pixel to measure which pages lead to orders, and Microsoft Clarity, which records anonymised page interactions so we can see where the site is confusing. Declining means none of them load, and your order and report work exactly the same.

These tools never receive your surname, your relatives’ names, your family details or your report. They are switched off entirely on the pages that hold them, and the surname and email fields are masked so they are not captured in recordings. When you buy, we send Meta a one-way encrypted form of your email address so a purchase can be matched to the advert that brought you here; the address itself is not readable and is not shared for any other purpose.

Your Rights

You may request a copy of your data, a correction, or its deletion at any time by emailing hello@myoriginreport.com. We will delete your order and report data within 30 days of your request. You can also withdraw your analytics consent whenever you like using the cookie notice.

Contact

For privacy-related questions, contact us at hello@myoriginreport.com.