A plain-language statement of what we collect, what we permanently prohibit, and the rights you hold over your family's information.
Effective: April 2026 · Currently operating as a sole proprietorship, LLC in progress. EternalCurrent.Online, LLC — a Wyoming limited liability company — will become the operating entity upon state acceptance of its filing.
EternalCurrent.Online generates revenue exclusively through member subscriptions and flat-fee vendor directory listings. Your data generates zero revenue for this platform.
The following categories of data are permanently prohibited from collection, storage, or processing on this platform. This is not a preference — it is a hard technical and policy ban.
If any user attempts to input prohibited data, it is not stored. Payment card details are never handled by this platform — all payment processing is delegated to Stripe under their PCI-compliant infrastructure.
Full birth dates — combining a specific day, month, and year — are permanently prohibited on this platform.
The platform accepts and stores birth month and year only (MM/YYYY). The specific day of birth is never requested, never accepted, and never stored.
Birth month and year is used solely for internal purposes: milestone reminders, generational context within your network, and chronological ordering of network members. It is never displayed in any report, export, or view accessible to other users. It is a system-level field only.
We collect only what is necessary to build and operate your network:
Your email address is never visible to any other member of your network, regardless of their role. It exists solely for the platform to send you authentication links and account-related communications. It is not displayed in any profile, export, report, or admin view accessible to other users.
All subscription payments are processed by Stripe. Payment card numbers, bank details, and billing information are handled exclusively by Stripe under their PCI-DSS compliant infrastructure. EternalCurrent.Online never stores, sees, or touches payment card data of any kind.
Everything shared on this platform belongs only to you. This is an absolute rule.
Access to your network is strictly private. Only members of your network can see its content. Within a network, visibility is governed by the member's own privacy settings and the network's community-defined roles.
Platform staff do not access individual network content except when investigating a reported safety issue, with documented reason and limited scope.
Birth month/year is never visible to any other user in any context.
Email addresses are never visible to any other user in any context.
EternalCurrent.Online will offer a directory of vetted service providers — yearbooks, family books, event photography, catering, and similar services relevant to family networks. This feature is designed to help members turn their network documentation into tangible experiences.
How it works:
ECO uses magic link authentication — a secure, passwordless sign-in link sent to your email. Links expire after a single use. No password is required.
Optional password authentication is available. Passwords are hashed using industry-standard methods and never stored in plain text.
The platform is built on Supabase with row-level security enforced at the database level. Data is encrypted at rest and in transit. All connections use HTTPS. The platform is hosted on Namecheap infrastructure.
Photos and videos you upload are stored privately and accessible only within your network. They are not indexed, publicly searchable, or used for any purpose outside your network.
We do not use facial recognition on any media uploaded to this platform.
Family networks frequently include children added by parents or other adult family members. Children added to a network do not have independent accounts and cannot sign in. Their profiles are managed by the adults in the network.
We do not knowingly collect personal information directly from children under 13. If you believe a child's information has been submitted without appropriate authorization, contact Admin@eternalcurrent.online.
Networks created for tribal communities or institutional use operate under the same privacy commitments as all ECO networks — plus additional protections. Tribal networks are sovereign: no outside access, no cross-network data sharing, no use of content for any external purpose.
Language and cultural knowledge documented within a tribal network belongs entirely to that community. It cannot be accessed, extracted, or used by the platform or any third party.
EternalCurrent.Online is a platform built for lineage — for passing cultural knowledge, stories, and voice across generations. The handling of a member's data after their death is not an edge case. It is central to the platform's purpose. This section explains exactly what happens, and what rights exist.
Your network does not disappear. It enters Directed Dormancy — the same state as any lapsed account — and is preserved indefinitely, privately, and intact. No content is deleted, sold, repurposed, or made publicly accessible.
This is not a passive default. It is a deliberate architectural commitment: your lineage archive belongs to your family, not to a server rotation schedule. Future Arcs sealed at the time of your death remain sealed and awaiting their designated milestones. No administrator or third party can access or deliver them without a verified representative of your network reactivating it.
After your death, the following may contact us to exercise data rights on your behalf:
All authorized representatives must provide verification of their authority before any action is taken. We will not act on unverified claims. Contact: Admin@eternalcurrent.online with subject line "Post-Mortem Account — [Member Name]".
We will never unilaterally delete, modify, or release any deceased member's content. All actions require explicit instruction from a verified authorized representative.
You may designate a trusted person in advance to exercise your post-mortem data rights. This is particularly recommended if your estate plan does not address digital assets, or if you want to ensure a specific family member can reactivate or preserve your network. To register a nomination, email Admin@eternalcurrent.online with subject "Post-Mortem Nomination" and include the nominee's full name, relationship to you, and contact email. This is recorded and associated with your account. You may update or revoke a nomination at any time.
California's Consumer Privacy Rights Act (CPRA) defines "consumer" as a living California resident and does not extend its privacy rights to deceased persons. However, CPRA's obligations on businesses — including data minimization, purpose limitation, and the prohibition on selling personal data — continue to bind EternalCurrent.Online with respect to all data, regardless of whether the account holder is living. We do not repurpose, sell, or process a deceased member's data for any purpose other than preserving it intact and acting on authorized representative instructions.
The operative California law governing authorized access to a deceased person's digital accounts is the Revised Uniform Fiduciary Access to Digital Assets Act (RUFADAA), codified at California Probate Code §§ 870–884. Under RUFADAA, a personal representative, trustee, or agent acting under a power of attorney has the authority to request access to or deletion of a deceased user's digital assets, subject to verification. EternalCurrent.Online recognizes and complies with RUFADAA requests from verified California representatives.
If you are a California resident, you may also use a Digital Directive — a legally recognized instruction that can be included in a will or trust — to specify exactly what should happen to your EternalCurrent.Online network after your death. We honor instructions received through this mechanism when submitted with appropriate legal documentation.
The EU General Data Protection Regulation (GDPR) explicitly excludes deceased persons from its definition of data subject (Recital 27), leaving posthumous data governance to member state legislation. Several EU member states have enacted specific protections:
For all EU members, the spirit of GDPR data sovereignty — that personal data belongs to the individual and their chosen successors, not to the platform — is foundational to how ECO was designed. Directed Dormancy is our structural expression of that principle applied to the context of death.
India's Digital Personal Data Protection Act 2023 (DPDPA) contains one of the clearest statutory post-mortem nomination rights globally. Under Section 12, a data principal (user) may nominate another person to exercise their DPDPA rights in the event of death or incapacity. This nomination right is directly supported by ECO's advance nomination process described above. Indian users are encouraged to register a nominee through our nomination process to ensure their rights are exercisable by their designated person.
EternalCurrent.Online serves families worldwide. In addition to the rights described above, users in specific jurisdictions have additional protections:
If you are located in the UK or EEA, your personal data is protected under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. You have the right to access, rectify, erase, restrict processing, data portability, and object to processing of your personal data. Our lawful basis for processing is your explicit consent when you create an account and contribute content. You may withdraw consent at any time by contacting us or deleting your account. We do not transfer your data to third parties for marketing purposes. Data is stored on servers in the United States via our infrastructure provider (Supabase). By using the platform, you consent to this transfer.
If you are located in Australia, your personal information is handled in accordance with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs). You have the right to access and correct your personal information held by us. We will not disclose your personal information to overseas recipients without your consent, except as required by our infrastructure provider for service delivery. If you believe we have breached the APPs, you may lodge a complaint with us at Admin@eternalcurrent.online, and if unsatisfied, with the Office of the Australian Information Commissioner (OAIC).
If you are located in Canada, your personal information is handled in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation, including Québec's Act Respecting the Protection of Personal Information in the Private Sector (Law 25). You have the right to access personal information held about you and to request correction. You may withdraw consent to the collection or use of your personal information at any time, subject to legal or contractual restrictions. Data is stored in the United States via our infrastructure provider. We take reasonable steps to ensure comparable protection of your information in that jurisdiction.
If you are located in New Zealand, your personal information is handled in accordance with the Privacy Act 2020 and the 13 Information Privacy Principles (IPPs). You have the right to access and request correction of personal information held about you. You may make a privacy complaint to us at Admin@eternalcurrent.online and, if unresolved, to the Privacy Commissioner of New Zealand.
If you are located in South Africa, your personal information is handled in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA). You have the right to access, correct, and request deletion of personal information held about you. You have the right to object to processing and to withdraw consent at any time. You may direct complaints to us at Admin@eternalcurrent.online and, if unsatisfied, to the Information Regulator of South Africa.
If you are located in Singapore, your personal data is handled in accordance with the Personal Data Protection Act 2012 (PDPA). You have the right to access and correct your personal data, to withdraw consent to the collection or use of your data at any time, and to be informed of the purposes for which your data is collected and used. Data transferred outside Singapore to our infrastructure provider is handled with comparable protections. You may contact us at Admin@eternalcurrent.online for any PDPA-related requests.
If you are located in India, your personal data is handled in accordance with the Digital Personal Data Protection Act 2023 (DPDPA) and applicable rules. You have the right to access information about your personal data, to correct and erase your data, to nominate another person to exercise rights on your behalf in the event of your death or incapacity, and to withdraw consent at any time. We process your data solely for the purposes you have consented to and do not share your data with third parties for advertising or marketing. You may direct requests and grievances to Admin@eternalcurrent.online.
If you are located in Nigeria, your personal data is handled in accordance with the Nigeria Data Protection Regulation 2019 (NDPR) and the Nigeria Data Protection Act 2023 (NDPA). You have the right to access, correct, and request deletion of personal data held about you, to object to processing, and to withdraw consent at any time. We do not share your data with third parties for advertising or commercial purposes. You may direct requests and complaints to Admin@eternalcurrent.online.
CAN-SPAM Act (United States). All commercial email communications from EternalCurrent.Online identify the sender clearly, include our physical mailing address (below), and provide a simple mechanism to opt out of future messages. To opt out, reply to any email with the word "unsubscribe" and we will remove you within 10 business days. We do not send unsolicited bulk commercial email.
CASL (Canada). For recipients located in Canada, our outreach to business contacts is conducted on the basis of implied consent, where recipients have publicly listed their contact information in connection with a business role, or where a prior business relationship exists. Every commercial email includes identification of the sender, our mailing address, and a clear unsubscribe mechanism. Express consent is obtained before any subsequent commercial messaging following an initial contact. You may withdraw consent at any time by replying "unsubscribe."
All jurisdictions. Regardless of the law applicable to your location, you may opt out of any commercial email from EternalCurrent.Online at any time by replying "unsubscribe" to any message. We will honor that request promptly and retain your address solely to ensure we do not contact you again.
Our mailing address:
EternalCurrent.Online
Attn: Privacy
Half Moon Bay, CA 94019
United States
Admin@eternalcurrent.online
We retain personal data only as long as necessary for the purposes for which it was collected, or as required by applicable law.
See also: Terms of Service Section 6b — Data Retention Schedule.
Changes to this policy that reduce your rights or expand data collection will be communicated by email before taking effect, and require your explicit consent. We will not make retroactive changes that disadvantage you without consent.
The current version is always at eternalcurrent.online/pf-privacy.html.
EternalCurrent.Online
Currently operating as a sole proprietorship, LLC in progress
Admin@eternalcurrent.online