Privacy Policy - Memory Space

Overview

Memory Space ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our photo sharing service.

Information We Collect

Account Information

When you create an account, we collect:

Email address
Name (as provided by you or your OAuth provider)
Profile picture (if signing in with Google or Facebook)
Password (hashed, if using email/password authentication)

Content You Upload

When you use Memory Space, we store:

Photos you upload to memory spaces
Captions and comments you write
Memory spaces you create (titles, descriptions, settings)

Automatically Collected Information

When you access our service, we may automatically collect:

IP address (for security and rate limiting)
Browser type and version
Device information
Usage patterns and access times

How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve our services
Process and display your uploaded content
Send you notifications about your content (e.g., moderation updates)
Respond to your support requests
Protect against unauthorized access and abuse
Comply with legal obligations

Photo Storage and Processing

When you upload photos:

Original photos are stored securely on our servers
We generate optimized versions (thumbnails and web-friendly sizes) for faster loading
Photos are stored in the visibility setting you choose (public or unlisted)
We do not scan, analyze, or use your photos for advertising or AI training

Third-Party Services

We use the following third-party services:

Google OAuth — For sign-in authentication (subject to Google's Privacy Policy)
Facebook OAuth — For sign-in authentication (subject to Meta's Privacy Policy)
Resend — For sending transactional emails (verification, notifications)
Pexels — For demo/sample photos only (not for user content)

Data Sharing

We do not sell your personal information. We may share your information only:

With your consent
To comply with legal obligations
To protect our rights, privacy, safety, or property
In connection with a merger, acquisition, or sale of assets

Your Rights

You have the right to:

Access the personal information we hold about you
Request correction of inaccurate information
Request deletion of your account and associated data
Export your data in a portable format
Opt out of non-essential communications

To exercise these rights, please contact us using the information below.

Data Retention

We retain your information for as long as your account is active or as needed to provide services. If you delete your account, we will delete your personal information within 30 days, except where retention is required by law or for legitimate business purposes.

Security

We implement appropriate technical and organizational measures to protect your information, including encryption in transit (HTTPS), secure password hashing, and access controls. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

Children's Privacy

Our service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the service after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us through our contact page.