Memefive Privacy Policy

1. Information We Collect

We collect different types of information depending on how you use the platform:

• Anonymous users: We store a hashed (one-way encrypted) version of your IP address and a randomly generated session token in our database. The raw IP address is never stored.

• Logged-in users: When you sign in via Clerk, we store your Clerk user ID, email address, and optionally your first and last name in our database.

• All users: We track your usage quota balance and session state to provide the service.

• Images: All images are processed entirely in your browser. We do NOT upload, store, or retain any images you use or create.

2. Cookies and Local Storage

We use the following browser storage mechanisms:

• anon_session cookie: A secure, HTTP-only cookie stored for up to 30 days to identify your anonymous session and preserve your usage quota across visits.

• sessionStorage & localStorage: Used temporarily to manage UI state such as login intent and pending upgrade status. This data is not sent to our servers.

• Clerk cookies: Managed by Clerk (our authentication provider) to maintain your login session.

3. Image Processing

All image editing and processing happens entirely in your browser using the HTML5 Canvas API.

• We do NOT upload your images to our servers.

• We do NOT store or retain any user-uploaded images.

• Images are only used within your local browser session.

4. Third-Party Services

We integrate with the following third-party services, each with their own privacy policies:

• Clerk (clerk.com): Handles user authentication. Clerk processes your email address and login credentials. Please review Clerk's Privacy Policy at clerk.com/privacy.

• Midtrans: Our payment processor for premium plan purchases and usage top-ups. Midtrans processes your payment details and transaction information. Your full payment card data is never stored by us.

• MongoDB Atlas: Our cloud database where session tokens, hashed IPs, usage balances, and account data are stored securely.

5. Payment Data

If you purchase a paid plan or top-up, the following data is processed:

• Your email address and name (passed to Midtrans for transaction records).

• Transaction ID, amount, currency, and status (stored in our database for record-keeping).

• We do NOT store credit card numbers or other sensitive payment details — these are handled entirely by Midtrans.

6. Data Security

We take reasonable measures to protect your data:

• IP addresses are hashed using SHA-256 with a server-side salt and are never stored in plain text.

• Session cookies are HTTP-only and cannot be accessed by client-side JavaScript.

• All communication between your browser and our servers uses HTTPS.

• Access to our database is restricted and secured.

7. Your Rights

As a user, you have the right to:

• Request deletion of your account and associated data by contacting us.

• Use the platform anonymously without providing personal information.

• Understand how your data is handled, as described in this policy.

8. Children's Privacy

Our platform is intended for a general audience and is not directed at children under 13 years old.

We do not knowingly collect personal information from children. If we discover such data has been collected, we will promptly delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons.

We will notify you by updating the 'Last Updated' date at the top of this page.

Continued use of the platform after changes constitutes acceptance of the updated policy.