Privacy Policy
Last updated: 14 April 2026
Ziarah.sg is a community project. This page explains what data we collect, why, and your rights under the Singapore Personal Data Protection Act 2012 (PDPA).
What we collect and why
Publicly shown on the site:
Grave records: Name of deceased, date of death, plot number, cemetery, section, and optional grave photo. This is the core directory data.
Private, never shown publicly:
Submitter email and phone: Used only to contact you about your submission or send an approval notification if you opted in.
IP address and timestamp: Stored for spam prevention and moderation. Not shown to anyone.
Server logs: Standard access logs kept for 30 days for security purposes.
How long we keep it
Approved grave records: Kept indefinitely unless a takedown is requested.
Rejected submissions: Deleted after 90 days.
Submitter contact details: Kept while their record is live; deleted with a rejected submission after 90 days.
Server logs: Deleted after 30 days.
Who can see your data
Only our volunteer moderators can see submitter data. We do not sell data. We do not use third-party analytics. Our infrastructure runs on Supabase (Singapore region) and Vercel.
Your rights (under PDPA)
Access: Request a copy of the personal data we hold about you.
Correct: Request correction of inaccurate data.
Delete: Request deletion of your personal data.
Takedown: Request removal of a deceased relative's record. See our Takedown Policy.
A contact channel for these requests will be published soon. We will respond within 30 days.
Contact
A contact channel for privacy enquiries will be published soon.