Our private space

Privacy, in plain words.

Updated October 22, 2026

Our Journal is operated for a small family group. Journal content is restricted to four invited Google accounts. The public information pages do not contain journal content.

Sign-in and member activity

Google sign-in and Supabase provide basic account identity, including email and profile information. The journal checks the invited address list on its server. It stores member identifiers with edits, video reviews, likes and comments. Secure browser cookies keep members signed in; the appearance preference is stored on the device.

Photographs and locations

The Mac connector reads selected Apple Photos assets and their metadata with macOS permission. Photo previews are sent to OpenAI for screening and supported descriptions; captions use cleared information. Apple Maps supplies place candidates. Only cleared display copies are eligible for the private website. Capture times, locations, descriptions and member edits may be saved with a memory. Apple Photos originals stay in the photo library; the journal’s local archive uses the configured external drive.

YouTube connection

The channel owner may grant read-only YouTube access. Our Journal uses channel identity, upload-list entries, video IDs, titles, descriptions, upload dates and availability information to create video drafts. It does not upload, edit or delete videos on YouTube, read private messages, or send YouTube data to an AI service.

The server stores the channel connection and an encrypted refresh credential so checks can run while the journal is closed. Video links, descriptions and review records are stored with the journal. Video files and thumbnails are not copied into its archive. A YouTube player loads only after a member plays a reviewed video; YouTube then receives connection and playback information and handles its own cookies and controls under Google’s Privacy Policy. Anyone who obtains an unlisted YouTube link may be able to watch it outside the journal.

Storage and service providers

Cloudflare hosts the journal, its records and cleared display images. Supabase handles sign-in. Encrypted recovery backups are stored in the owner’s private Google Drive folder. Backups include cleared image files, journal records and video links, but exclude YouTube connection credentials and video files. Apple Music receives authorization and playback requests when a member chooses to use it.

Information is used to operate the family journal, not sold or used for advertising by Our Journal. Service providers process the information required for their features under their own policies. Our Journal’s use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Control, retention and removal

In More → Our videos, Disconnect imports removes the saved channel connection and stops automatic checks. Previously imported memories remain until removed separately. The owner can also revoke access in Google Account permissions. Members can edit memories and remove their own comments. To request removal of imported YouTube data, other journal records or recovery copies, contact the family member who operates the journal. Removing a journal link does not delete the video on YouTube. Recovery copies can retain prior records until they are replaced or deliberately removed.

Journal records are retained for the family’s historical archive until the owner removes them. Credentials are retained only while their connection is enabled. For questions or data requests, contact the family member who invited you.