Private until you say otherwise
Your archive starts private, and you choose recipients and the sections they're allowed to view.
Owner-authorized instant handoff
With explicit consent, a designated loved one can use a printed handoff QR and separate password to release an archive immediately. The owner can revoke an erroneous death notice by signing in, but previously copied material cannot be recalled.
Keep the private handoff sheet secure
The special handoff QR and separate password are powerful credentials. Together with the designated recipient's account they can release private records immediately. Other ordinary QR links do not do so.
Confidential credentials
Do not store passwords, recovery phrases, safe combinations, or similarly sensitive secrets. An independently audited vault is not yet available.
This is a self-hosted beta, not a security-certified production service. Professional review, independent backups, email verification, and final policies are required before handling real customer archives.