Privacy Policy

1. Who We Are

MemVault ("we", "us", "our") is a meme-sharing platform operated by Praty. For privacy-related enquiries contact us at pratyushdave80@gmail.com.

2. What Data We Collect

We do not collect your real name, phone number, payment information, or location beyond what your IP address implies.

3. How We Use Your Data

• To create and manage your account
• To display content you have submitted
• To understand how the Service is used and improve it (aggregate analytics)
• To detect and prevent abuse or spam
• To respond to your enquiries or DMCA notices

We do not sell your personal data. We do not use your data for advertising profiling.

4. Cookies and Local Storage

We use the following storage mechanisms:

• localStorage (essential) — stores your auth token (mv_token), user info (mv_user), upvoted meme IDs, saved meme IDs, your theme preference, and your cookie consent choice (mv_cookie_consent). This data never leaves your device unless transmitted to our API for authentication. These are strictly necessary for the Service to function and are used regardless of consent.
• Google Analytics cookies (analytics, consent-gated) — anonymised usage tracking via GA4. GA4 Consent Mode v2 is implemented: analytics storage is set to denied by default and only activated if you click "Accept all" on the cookie banner. IP anonymisation is enabled. If you click "Decline analytics", no GA cookies are set and no analytics data is sent. You may also opt out at any time by installing the Google Analytics Opt-out Browser Add-on.
• Cloudflare cookies (essential) — security, DDoS protection, and performance cookies set automatically by our hosting provider (e.g. __cf_bm). These are strictly necessary and cannot be disabled without breaking the Service.

When you decline analytics, your choice is saved in localStorage (mv_cookie_consent: declined) and respected on all subsequent page loads — GA is not initialised.

5. Third-Party Processors

• Cloudflare (USA) — CDN, hosting, edge database (D1). Privacy policy
• ImgBB — image hosting for uploaded memes. Privacy policy
• Google Analytics (USA) — anonymised analytics. Privacy policy

Data transfers to the USA are covered by Standard Contractual Clauses (SCCs) where applicable.

6. Data Retention

• Account data — retained while your account is active; deleted within 30 days of an account deletion request
• Uploaded images — retained on ImgBB until you request removal or your account is deleted
• Analytics data — retained per Google Analytics defaults (14 months)
• Browser storage — stays on your device; clear it any time via your browser settings

7. Your Rights

Depending on where you live, you may have the right to:

• Access a copy of your personal data
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict certain processing
• Data portability (receive your data in a machine-readable format)
• Withdraw consent at any time where processing is based on consent

To exercise any right, email us at pratyushdave80@gmail.com. We will respond within 30 days.

8. Children's Privacy

MemVault is not directed to children under 13. We do not knowingly collect personal information from children under 13. Users must be at least 13 years old to register an account, in accordance with the Children's Online Privacy Protection Act (COPPA) and equivalent laws. If you believe a child under 13 has provided us with personal data, contact us immediately at pratyushdave80@gmail.com and we will delete it promptly.

9. Security

Passwords are hashed before storage. Auth tokens are signed JWTs transmitted over HTTPS only. We regularly review our security practices. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

10. DMCA and Copyright

If you believe content on the Service infringes your copyright, please refer to Section 8 of our Terms of Service for our full DMCA notice and takedown procedure. You can also email our designated agent directly at pratyushdave80@gmail.com with the subject line "DMCA Takedown Notice".

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you by updating the "Last updated" date at the top of this page. For material changes, we will make reasonable efforts to notify registered users. Continued use of the Service after changes constitutes acceptance of the revised policy.