PRIVACY

Your family’s stories are private.

Updated 7 October 2026

Things Retold is in early access. Start small, keep your originals and download an archive copy regularly. Payments are not enabled.

Things Retold is operated by Sindre. sindre.alstad@gmail.com

What we store and why

We process your email and account information for sign-in, memberships and roles for family access, and the photos, audio, stories, object details, revisions and drafts you add. The purpose is to provide the family archive you request. Account and archive processing is necessary to provide this service under our agreement with you. Necessary security and operational logs help protect the service and diagnose faults, based on our legitimate interest in secure operation.

Who can see the archive

Saved objects are shared with members of the relevant archive according to their roles. Drafts are private to their author. Sign-in and access are checked on the server, and media is stored privately. Family archives are not published on the public homepage or in search engines. The service is not end-to-end encrypted. Necessary administrative access may be used for operation and support.

Providers and optional AI

Supabase handles accounts, the database and private media storage. Resend delivers sign-in codes to your email address. OpenAI Sites and Cloudflare host the website and process network requests and necessary technical data. Email sent to our contact address is handled by Gmail. Some provider processing may take place outside the EEA.

AI is used only when you start an analysis and consent to sharing. Selected photos, selected existing information and your question are sent to the provider shown before starting: OpenAI or Anthropic. Search terms may be sent to search providers. The report and the information used are stored with the research job. We do not make automated decisions with legal effects on you. You can use the archive without AI and contact us to withdraw consent and request deletion. Withdrawal does not undo processing that has already taken place.

Read the providers’ information: Supabase, Resend, OpenAI, Anthropic, Cloudflare, Google.

Retention, deletion and browser storage

The archive is retained while the account and archive are in use, until content or the account is deleted. Trash offers a 30-day recovery window; final cleanup and operational copies may take longer. We do not currently promise a fixed removal period across every provider log and backup. Contact us with a deletion request so we can clarify what has been removed and what may need to be retained. Export files downloaded by you or other members must be deleted by their recipient.

Your browser stores sign-in state and preferences such as language and view. A local demonstration can also store a separate archive on your device. We have not added advertising pixels or marketing tracking to the app.

Your rights

You can contact us to request access, a copy, correction or deletion of your information, restriction of processing, or to object to processing based on legitimate interests. Owners and stewards can download an archive copy in the app. You can complain to the Norwegian Data Protection Authority. We will inform you of material changes in how your information is used. Datatilsynet.