How we treat family information.

This notice describes the Ancestry Attic platform at ancestryattic.family. It will grow as family-site features open. It is a working notice, not a courtroom carving.

What we collect

When you create an account we store your name, email address, and the sign-in method you chose. Passkeys store a public key and credential id — not your fingerprint or face. Passwords are stored as one-way hashes. Google and Apple tell us a stable user id and, when they permit it, a verified email and name.

We also keep activity records (sign-in, site creation, administration), basic request data such as IP address and browser, and the family site id you claim.

How it is used

To run your account, send sign-in codes, host your family site, prevent abuse, and understand whether the house is standing. We do not sell family information. We do not put your photographs in public search results.

Cookies

A session cookie keeps you signed in. It is HTTP-only and marked Secure.

Email codes

If you sign in with a password, we email a one-time code. Until outbound mail is configured on this server, codes are written to an operator log so the household can still be set up.

Your choices

Write to the site operator if you need an account closed or a correction made. Family-site owners will be able to enable or disable members from their own tools.