Privacy policy

• Your account: your email address, language preference and — only if you choose one — a password. Passwords are stored as a salted scrypt hash, which nobody, including us, can turn back into the password.
• Your family tree: what you choose to write — names (in any script), other names, gender, dates of birth and death, place of birth, village or native place, gotra, private notes, and how people are related.
• Matches: suggestions that someone in your tree may be the same person as someone in another tree, and what each family decided.
• Settings: for example whether remembered ancestors in your tree can be found in search.
• Technical data: a sign-in cookie that keeps you logged in; your IP address, used briefly in memory to limit repeated sign-in attempts and searches; and short-lived server logs for security and troubleshooting.

We do not use analytics or advertising trackers. Fonts are served from our own server.

• To show and edit your tree, and to label everyone with their relation to you.
• To find possible relatives: names, spelling variants, private dates, places, gotra and the names of surrounding relatives are compared across families. Dates are used only inside this comparison.
• To email you sign-in and confirmation codes, password resets and security notices, invitations you send, and alerts that a possible relative was found. You can turn relative alerts off in Settings or from any alert email; account and security emails can't be turned off while you have an account.
• To keep the service safe — for example rate-limiting sign-in attempts and searches.

Never shown to anyone but you: dates of birth and death, place of birth, and private notes. You can turn search discovery off in Settings at any time.

Trees naturally include relatives who have not signed up. Please add living people only with care and, where you can, their agreement. Living people are never listed in search. Anyone who finds themselves in a tree and wants to be removed can write to hello@meravansh.lol and we will help.

We don't sell or rent personal data, and we don't share it for advertising. We use:

• a hosting provider for the server that runs Mera Vansh and stores its database;
• an email delivery provider to send sign-in codes, invitations and notices.

We may disclose information if the law requires it.

• See and correct: everything you wrote is editable in your tree.
• Take it with you: download your whole tree as GEDCOM or JSON from Settings, private dates included.
• Decide on matches: confirm or decline any suggested match; a declined match stays declined.
• Hide from search: switch off discovery in Settings.
• Delete: deleting your account in Settings removes your account, your tree and everyone in it, your matches and your sign-in records.

We keep your tree while your account exists. When you delete your account, it is removed from our database. If another family added one of your remembered ancestors to their own tree from search, the names and places they copied are part of their tree and stay with it. Sign-in codes expire after 10 minutes and links after 20 minutes (invitations after 7 days).

The site is served only over HTTPS. Sign-in codes are stored hashed, work once and expire; sessions are signed; every request is checked so you can only read and change your own tree. No system is perfectly secure — if you notice anything wrong, tell us at hello@meravansh.lol.

Accounts are for adults (18 and over). Younger family members can appear in a tree written by a parent or guardian, and — like every living person — are never listed in search.

If we change this policy we will update the date above, and tell you by email before any change that affects what other families can see. Questions or requests: hello@meravansh.lol.