Thomas Planet privacy policy

You control what becomes public

Thomas Planet is built to connect the Thomas family without exposing living people by accident. You can share shareable clues, keep sensitive details private, and choose how much of your family story belongs in the verified member layer.

Public profile control

Your public profile is off until verification or admin approval. Public profiles show only the fields you intentionally save for family discovery: display name, photo, broad region, tree links, branch clues, and legacy answers.

Private family data

Mailing addresses, phone numbers, private emails, children, grandchildren, private notes, raw tree files, and exact event details stay outside public profile rows and are visible only to you and authorized admins.

GEDCOM files

Tree uploads may include living relatives and private notes. They stay private for review, matching, comparison, and future branch tools. They are not auto-published.

Archive uploads

Photos, videos, Bible pages, letters, and documents default to protected review. Public visibility requires deliberate permission and extra caution for minors and living people.

Events and reunions

Reunion details, exact addresses, attendee names, and RSVP notes stay private unless reviewed.

Family outreach

Admins can use optional private contact fields only for Thomas Planet family outreach, such as branch research, reunions, newsletters, postcards, or safety notices. You can opt out of admin contact.

No third-party passwords

Thomas Planet does not ask for Ancestry, FamilySearch, Geni, WikiTree, email, or DNA account passwords. Use links, exported files, or permission-based sharing instead.

Safety promise

Family connection does not mean automatic access to everything. Verification, consent, proof labels, private storage, and row-level security all exist to keep curiosity from becoming exposure.