Privacy Policy

1. Who We Are

MemVault ("we", "us", "our") is a meme-sharing platform operated by Praty. For privacy-related enquiries contact us at pratyushdave80@gmail.com.

2. What Data We Collect

Category	Examples	Why
Account data	Email address, hashed password, username	Account creation and authentication
Content you post	Uploaded images, captions, category	To display your memes on the platform
Usage data	Pages visited, clicks, session duration	Analytics via Google Analytics (GA4)
Browser storage	Upvote history, saved memes, auth token (localStorage)	Persisting your preferences — stored on your device only
Technical data	IP address, browser type, referring URL	Security, fraud prevention (via Cloudflare)

We do not collect your real name, phone number, payment information, or location beyond what your IP address implies.

3. How We Use Your Data

To create and manage your account
To display content you have submitted
To understand how the Service is used and improve it (aggregate analytics)
To detect and prevent abuse or spam
To respond to your enquiries or DMCA notices

We do not sell your personal data. We do not use your data for advertising profiling.

4. Cookies and Local Storage

We use the following storage mechanisms:

localStorage — stores your auth token (mv_token), user info (mv_user), upvoted meme IDs, and saved meme IDs. This data never leaves your device unless transmitted to our API for authentication.
Google Analytics cookies — anonymised usage tracking. GA4 is configured with IP anonymisation. You can opt out via the cookie consent banner or by installing the Google Analytics Opt-out Browser Add-on.
Cloudflare cookies — security and performance cookies set by our hosting provider. These are essential and cannot be disabled.

5. Third-Party Processors

Cloudflare (USA) — CDN, hosting, edge database (D1). Privacy policy
ImgBB — image hosting for uploaded memes. Privacy policy
Google Analytics (USA) — anonymised analytics. Privacy policy

Data transfers to the USA are covered by Standard Contractual Clauses (SCCs) where applicable.

6. Data Retention

Account data — retained while your account is active; deleted within 30 days of an account deletion request
Uploaded images — retained on ImgBB until you request removal or your account is deleted
Analytics data — retained per Google Analytics defaults (14 months)
Browser storage — stays on your device; clear it any time via your browser settings

7. Your Rights

Depending on where you live, you may have the right to:

Access a copy of your personal data
Correct inaccurate data
Request deletion of your data ("right to be forgotten")
Object to or restrict certain processing
Data portability (receive your data in a machine-readable format)
Withdraw consent at any time where processing is based on consent

To exercise any right, email us at pratyushdave80@gmail.com. We will respond within 30 days.

8. Children's Privacy

MemVault is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, contact us immediately and we will delete it.

9. Security

Passwords are hashed before storage. Auth tokens are signed JWTs transmitted over HTTPS only. We regularly review our security practices. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you by updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the revised policy.