Last updated: 21 July 2026
Trusting anyone with the details of one of the hardest times in your life is a big thing to ask. Here is how we look after what you share with us, in plain language.
In short: your documents are encrypted and stored in Australia. We never sell your information. Only you can see what is yours, and you can share it with the people you choose. You can download everything and close your account at any time. If something ever went wrong with your data, we would tell you.
The documents you keep in your vault, and your account register, are stored in Australia, on secure servers in Sydney. Some of the services we rely on to run the platform, like sign-in, payments and email, are provided by trusted companies based overseas. When that happens, we take reasonable steps to make sure your information is protected to Australian standards. You can see the full list in our Privacy Policy.
Your information is encrypted while it travels between your device and us. The documents you keep in your vault, like a will or an advance care directive, are also encrypted while they are stored. Encryption scrambles information so it cannot be read by anyone it is not meant for.
You are always in control of what you share. You can download everything you have stored and close your account at any time. We will never sell your information, and we will never hand it to advertisers.
Your records are yours alone. The platform is built so that one member can never see another member's information. What you store stays private to you and the people you choose to share it with.
The accounts we use to run 18December are protected with multi-factor authentication and passkeys, so they cannot be reached with a stolen password alone. We treat everything you share as confidential.
We have set up email authentication on our domain. In plain terms, this makes it much harder for anyone to send you an email pretending to be from 18December. If a message claiming to be from us ever looks off, trust your instinct and check with us first.
No one can promise nothing will ever happen. What we can promise is honesty. We have a written plan for responding quickly to any security problem, including telling you promptly if your information is affected and what to do next. This is also our obligation under the Notifiable Data Breaches scheme in the Privacy Act 1988 (Cth).
If you ever want to understand more about how your information is handled, read our Privacy Policy or email us at hello@18december.com.au. A real person will answer.