Privacy policy

Last updated: 16 October 2026

Funeral Party List lets you make the playlist for your own funeral and share it. This page says what it collects, why, and what you can do about it. It is short, because there is not much to say: no account, no advertising, no tracking cookies.

Who is responsible

Simone Ricci, Turin, Italy, is the controller of the personal data described here. Write to simone@lamorbidamacchina.com about anything on this page.

What we collect, and why

Your list. The songs, your last words and the name you publish under. A published list is public by design: anyone with its link can see it, and that is the point. If you choose to, it is also shown in the public gallery of lists, where anyone visiting the site can find it with the name you sign it with; you can take it out at any time from your edit link. We keep it to provide the service you asked for (Article 6(1)(b) GDPR).

Your age confirmation. When you publish, we record the time you confirmed you are 16 or older.

Drafts and edit links. An unpublished list is kept with a secret token so you can come back to it. A published list has a separate, secret edit link: anyone who holds it can change the list, so keep it to yourself.

How the site is used. We count visits and actions, such as a list viewed, a preview played or a share button tapped, to learn whether the product works. Each count carries your language, your country as reported by our network provider, your type of device and, where there is one, the list involved. To tell visitors apart within a day, we compute an identifier from your IP address and browser, scrambled with a secret key that changes with the date. It is not stored on your device, and it changes every day, so we cannot follow you from one day to the next. It is still pseudonymous rather than anonymous data, and we treat it as personal data. We do this in our legitimate interest in understanding and improving the service (Article 6(1)(f) GDPR). You can object by writing to us.

Technical data. Like any website, our servers see your IP address and browser with each request. Our hosting provider keeps its request logs for one day. When you use the composer, a session also stores your IP address and browser. It expires after 2 hours without activity.

Reports. If you report a list, we record the reason and a daily identifier worked out in the same way, so that one person cannot report the same list many times.

We do not ask for your email address, and we do not sell or share personal data for marketing. We may share aggregate statistics with partners, such as how many lists were made in a month. These never identify anyone.

Cookies

We use only the cookies the site needs to do what you asked. None is used for analytics or advertising, so we do not ask for consent.

draft: Brings you back to the list you are composing; 30 days
edit_link: Lets this device reopen your published list for editing; 365 days
locale: Remembers the language you chose; 365 days
funeral-party-list-session: Keeps the composer working from one page to the next; 2 hours
XSRF-TOKEN: Stops other sites from sending forms in your name; 2 hours
__cf_bm: Set by our network provider, Cloudflare, on every page, to tell people from automated traffic; 30 minutes

Apart from Cloudflare's, list pages, the home page and this page set no cookies.

Services your browser contacts directly

Covers and 30-second previews load straight from the servers of Apple and Deezer. When a list page shows a cover or plays a preview, your browser connects to them and they receive your IP address, under their own privacy policies. The links to listen to a song on Spotify, Apple Music or Deezer take you to those services only when you tap them.

Who processes data for us

Laravel Cloud (Laravel Holdings Inc.) hosts the site and its database in Frankfurt, Germany.
Cloudflare, Inc. delivers the pages through its network, as part of the hosting.

Where a provider is based outside the European Union, transfers rely on the EU–US Data Privacy Framework or on the European Commission's standard contractual clauses.

How long we keep it

Published lists: until you ask us to delete them, or until we remove them for breaking the terms of use.
Unpublished drafts: deleted within 60 days of the last change.
Usage counts: 13 months, then deleted. Totals that identify no one are kept.
Reports: 12 months.
Sessions: they expire after 2 hours without activity and are deleted within 60 days.
Hosting logs: one day.

Your rights

You can ask to see the personal data we hold about you, to have it corrected or deleted, to restrict how we use it, or to object to its use. Write to simone@lamorbidamacchina.com. To delete a published list, include its edit link so we know it is yours; we delete it within 30 days.

If you think we have got something wrong, you can complain to the Italian data protection authority, the Garante per la protezione dei dati personali, or to the authority where you live.

Age

You need to be 16 or older to publish a list.

Changes

If this policy changes, we update the date at the top. If a change affects data we already hold, we say so on the site.