Last updated: August 20th, 2025
At OnceGone, we take privacy seriously. This Privacy Policy explains how we handle data in compliance with the General Data Protection Regulation (GDPR) and other applicable EU privacy laws.
1. Who We Are
OnceGone is a digital legacy vault service that allows users to securely upload files for release to inheritors under conditions chosen by the user.
2. What Data We Collect
Unlike most services, OnceGone is designed for complete anonymity.
-
Account Data: We do not collect names, email addresses, or any personal identifiers. Upon purchase, you receive a unique ID and passcode. These are the only credentials that link you to your account.
-
Uploaded Data: Files you upload (documents, images, videos, text, credentials, etc.) are encrypted and stored securely. We do not open, view, or analyze them.
-
Payment Data: Payments are processed by Stripe. We do not store your credit card details. Stripe may collect information required by law (such as billing details, fraud prevention data). Their privacy policy applies: https://stripe.com/privacy.
-
Support Requests: If you contact us (e.g., via support@oncegone.com), we may process the information you choose to share to resolve your issue.
3. How We Use Data
We use data only for the following purposes:
-
To create and maintain your anonymous account (via unique ID and passcode).
-
To store and encrypt your uploaded files until their release conditions are met.
-
To process secure payments through Stripe.
-
To respond to user support requests.
We do not use your data for profiling, marketing, or advertising.
4. Data Storage & Security
-
All files are stored in undisclosed secure facilities within the European Union, subject to EU privacy and data protection laws.
-
Files are encrypted, and access is possible only with the correct unique ID and passcode.
-
We operate under a zero-knowledge principle: OnceGone cannot access, review, or share your files.
5. Data Sharing
-
We do not sell, trade, or share your data with third parties.
-
Payment details are processed only by Stripe.
-
In rare cases, we may disclose limited data if required by law or legal process.
6. User Control & Rights (GDPR)
Even though OnceGone is anonymous, GDPR gives you rights regarding personal data:
-
Right of Access – You may request information about data we process.
-
Right to Rectification – You may correct information if inaccurate (limited since we do not collect personal data).
-
Right to Erasure – You may delete your account and all files by logging in and removing them.
-
Right to Restriction – You may request limited processing (not applicable to file storage).
-
Right to Data Portability – You may download your uploaded data at any time.
-
Right to Object – You may object to processing (limited since we do not process personal identifiers).
-
Right to Lodge a Complaint – You may file a complaint with your local Data Protection Authority (DPA).
Since accounts are anonymous, we may require you to authenticate using your unique ID and passcode before honoring GDPR-related requests.
7. Data Retention
-
Uploaded files are retained until they are released based on your settings (date, inactivity timer, passcode).
-
If you delete your account or files manually, they are permanently erased and cannot be recovered.
-
Support communications may be retained as required by law.
8. Children’s Privacy
OnceGone is not intended for children under the age of 18. We do not knowingly collect personal data from minors.
9. International Data Transfers
All data is stored within the European Union. We do not transfer data outside the EU/EEA.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect technical, legal, or business changes. The revised version will always be available on our website, with a new “Last updated” date.
11. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your GDPR rights, you can reach us at:
📧 support@oncegone.com