Skip to content
Tribute Portrait
Start

Privacy

Tribute Portrait, a business based in Ontario, Canada, operates tributeportrait.com. It restores a photograph you upload and sends you the files. Contact support@tributeportrait.com.

What we collect

  • The photograph you upload, and the restored files made from it.
  • An email address, when Stripe’s checkout collects one. We use it to send a download link once an email service is connected. The files are on the screen after payment whether or not that message is sent.
  • Payment card details are collected by Stripe. We do not store card numbers.
  • A browser cookie that ties this browser to the upload, the preview, and any family-pack portraits still to use. It is an httpOnly cookie.
  • A second cookie that remembers US or Canadian dollars for the prices on the site.
  • The country of the connection, when the host sends it, is used only to choose the starting currency. We do not save the country.
  • We do not store your IP address with the photograph. Rate limiting stores a salted hash of the address and uses that hash only to count requests. Visit counts store a separate salted hash of the UTC date, the address, and the browser, and that hash changes every day. It is kept only as an aggregate unique count for a few days. The address and the browser name are not stored, and no cookie is set for this count.
  • Ordinary host logs, such as the time of a request, may be kept by the host.

Why

We use the photograph to make the preview and the files you download. We use the email, when Stripe sends us one, to mail that link and, if you write to us, to reply. We do not sell personal information. We do not use your photographs to train AI models.

Who else handles the files

  • fal.ai processes the photograph when a live restoration key is configured. A free preview uses restoration, a content check, and a studio matte when you ask for a studio background. Buying without a free preview runs that same restoration after payment. After payment, the print enlargement is sent to fal. A paid clip also sends the restored portrait, and a driving video that is not your photograph, so the portrait can blink or ease a soft smile. The head is not turned and the person does not speak. fal’s temporary copies of that photograph are deleted within about 15 minutes. In demo mode, the photo stays in our storage and is not sent to fal.
  • A content check sends the photograph through fal for review before a preview is made. The review looks for sexual content, a minor in a sexual or exploitative context, gore, hate imagery, and illegal activity. An ordinary memorial photograph is allowed, including a photograph of a child. If the review cannot be completed, the photograph is still accepted.
  • Stripe processes the payment through Link, the merchant of record, and collects the email. Your card statement shows LINK.COM* TRIBUTE PORTRAIT (your bank may shorten it). Sales tax, GST, and HST are added at checkout where they apply.
  • Vercel hosts the site and stores files in a private Blob store. Vercel also checks that an upload, a preview, and checkout came from a browser. If that check cannot be completed, the request is refused.
  • We use Vercel Web Analytics to count visits in aggregate, without cookies or tracking you across sites.
  • Upstash Redis stores the salted hash and the request counts for rate limiting. It does not receive the photograph. If the rate-limit count cannot be recorded, the request is refused. It also stores daily page-view totals and the anonymous daily visit count. If a visit cannot be recorded, the page still loads.
  • An email provider, Resend or Postmark, sends the download link once one is connected. Until then, the link is only on the screen.

How long we keep photographs

Unpaid uploads and previews expire 15 minutes after the last preview. They are deleted when opened after that, and a cleanup runs every 5 minutes, so a file can remain a few minutes past the expiry. You can delete the photograph sooner with the button on the preview, or by closing or reloading the tab. Opening checkout keeps it until the timer runs out.

A paid portrait, each free redo of that portrait, a paid motion clip, the photograph you uploaded, and the download link are kept for 7 days after payment, then deleted together. A free redo does not extend that time. A full refund ends access right away and deletes the files. A partial refund keeps your download link working. Print sizes and the obituary photo are made from the version you select while the link works. fal’s temporary copies of the photograph are deleted within about 15 minutes. You can ask us to delete them sooner at support@tributeportrait.com.

Canada

If you are in Canada, you may ask to see the personal information we hold, ask for a correction, or withdraw consent to further use, subject to limits in PIPEDA. Contact support@tributeportrait.com. You may also contact the Office of the Privacy Commissioner of Canada.

United States

You may ask us to delete the photograph and the email we hold. State privacy laws differ.

Children

The person who uploads and pays should be an adult arranging a memorial. The photograph itself may show a person of any age. Uploading confirms you have the right to use it.