SurnuaiapühaTrust
Trust & Security
Surnuaiapüha holds memorials that families expect to last. This page describes, plainly, how that material is stored and who can see it.
Hosting and storage
The site, the database and uploaded photographs are hosted with managed cloud providers. Data is transmitted over TLS and stored encrypted at rest by those providers. Backups are taken by the database provider on a regular schedule.
Access control
Every table holding Profile data is protected by row-level security, so a signed-in Account Holder can only read and write their own records. Administrative access is limited to the operators of the Service and is used only for support and maintenance. API keys and other secrets are held server-side and are never sent to the browser.
The public map holds the minimum
Visitors do not need an account to view the map. It is served from a restricted, read-only view containing only what a pin needs: the coordinates, the memorial name, the category icon and the link to the memorial page. Account emails, private family-tree identifiers and payment records are not part of that view. Requests to the public map are rate limited.
What you choose to publish
A Profile is private until you publish it. Once published, the content you marked as public is, by design, visible to anyone with the link — that is the point of a memorial. You can unpublish or ask us to remove a Profile at any time.
Providers we rely on
| Provider type | Purpose |
|---|---|
| Hosting and database | Running the site and storing Profiles and photographs |
| Payment processor | Taking one-off euro payments; we never see card numbers |
| Mapping provider | Displaying the map and grave pins |
| Email delivery | Account and support email |
Deletion and privacy requests
You can request a copy or deletion of your data at any time. Details are in our User Data Policy and Privacy Policy.
For privacy questions or to report a security vulnerability, email support@balticmemorials.com. We respond to verified requests within 30 days.