What to include
EverStory is built for family stories — names, birth and passing dates, places lived, memorable moments, photos, and the written and spoken word that makes someone who they are.
What NOT to include
Please do not post any of the following on EverStory, in stories, memories, photos, or captions:
- Government ID numbers — SSN, passport, driver's licence, national ID, tax ID
- Financial account information — bank account numbers, credit or debit card numbers, routing numbers, brokerage or crypto wallet keys
- Passwords, recovery codes, or answers to security questions
- Private medical records, diagnoses, or treatment details, unless you have explicit consent from the person (or their legal representative)
- Home addresses or phone numbers of living people (unless you have their consent and the story visibility is private or family-only)
- Photographs of IDs, credit cards, bank statements, prescriptions, or similar documents
- Content about other people that violates their privacy or was shared with you in confidence
Visibility you choose, meaning it matters
- Private — only you see the story. Default for new stories.
- Family — people you invite as contributors can see the story.
- Community — the story is listed on your organisation's community page and visible to signed-in members of that community. Individual pages still respect family/private rules on memories.
- Public — anyone on the internet can read this story. Before selecting public: think about what you're comfortable with a stranger reading on a commute, in a search result, or in a web archive ten years from now.
Consent for living people
If a story or memory is about someone who is still living, get their consent before making the story public or inviting contributors. If you're preserving an elder's voice on their behalf, make sure they're aware of the visibility setting.
Take-down requests
If you believe a story on EverStory violates your privacy or was posted without appropriate consent, email privacy@everstory.digital with the URL and a brief description. We review take-down requests within one business day.
How we handle your data
- Stories and memories are stored on AWS in the United States.
- We never sell your content. We don't train AI models on your stories without explicit opt-in.
- Photos and audio are served via CloudFront; we use signed URLs where appropriate. Public media is cacheable at edges.
- You can delete any story or memory; deletion is permanent.
- You can request account deletion by emailing privacy@everstory.digital.
When in doubt
Keep it private, share with family, and let the stories that deserve to be public tell themselves to those close first. You can always raise visibility later — it's much harder to pull something back once it's been seen.