Privacy Policy

Accounts and saved creations

If you choose email sign-in, Cloudflare Email Service processes your email address and the sign-in message to deliver a one-time login link. The link expires after 15 minutes. We store a hashed verification token and expiry to verify the link, and use keyed hashes of email addresses and available IP addresses to limit repeated sending requests. Delivery diagnostics exclude the sign-in link and email address.

We store account details supplied by your sign-in provider, such as your name, email address, profile image, and account identifiers. We also store session information, credit and billing records, submitted prompts, generation settings and status, and generated videos and poster images. We use this information to sign you in, run generations, track credits, provide your saved creations, and resolve support requests.

The meme generator uses a supplied reference character and does not require you to upload a personal photo. Avoid including confidential or sensitive personal information in your scripts.

Why we process information

Where data-protection law requires a legal basis, we process account, generation, and payment information to deliver the service you request; use necessary security and fraud-prevention information for our legitimate interests in protecting the service; and retain records required to meet legal obligations. Where consent is required for optional processing, that processing requires your consent. You may withdraw consent without affecting processing that was lawful before withdrawal.

Support messages and the details you include in them are used to respond to your request. Necessary operational logs may include request times, errors, browser information, and network information for troubleshooting and security.

Generation providers and storage

Waffo processes the complete generation prompt for pre-generation safety screening. We retain the screening decision, request identifier and categories for review. WaveSpeedAI also processes prompts and generated video URLs through Molmo2 safety checks. We store moderation status and flagged categories with generation records to enforce our content rules. WaveSpeedAI receives your prompt, reference material, and selected settings to produce your video. Replicate may receive generated video URLs to create preview images. Our hosting, database, and storage providers process the information needed to operate the service.

Generated videos and posters are delivered through direct media URLs. Anyone who has a media URL may be able to view or share the file without signing in. An account-protected creations page does not make these media links private. Providers may process information in countries other than your own and apply their own retention practices.

Provider privacy policies

Read the policies for WaveSpeedAI, Replicate, Waffo, Stripe, and Google (including Google Analytics) for their processing practices. TikTok’s applicable privacy policy is available through its embedded player. These services have their own privacy practices; this policy describes our use of your information.

Payments

Stripe is our default checkout and payment processor. Waffo may process purchases made through its checkout. We retain the account, customer, transaction, subscription, and credit records needed to fulfill purchases, track renewals, and reconcile refunds. We do not store full payment-card numbers in our application database.

Abuse prevention

We use TrueUser to assess eligibility for free signup credits. We send your email address and, when available, account name, browser user agent, and trusted client IP address. We store the verification verdict and check time with your bonus record. Only an explicit block verdict withholds automatic welcome credits; this does not by itself prevent signing in or using purchased credits. Review verdicts, unavailable checks, and verification service failures receive the one-time welcome credits. Contact us if you believe your bonus was withheld in error.

Cookies, local storage, and analytics

We use session cookies for sign-in and local browser storage to resume a generation in progress. Google Analytics may be used when configured to understand site usage. You can manage cookies and site storage through your browser settings; blocking essential cookies may prevent sign-in or other features from working.

Embedded TikTok videos

Our landing page includes players hosted by TikTok. When a player loads, your browser connects directly to TikTok, which may receive your IP address and browser information and use cookies under its own privacy policy. Creator videos are displayed as inspiration and are not examples of private user creations from our service.

Retention and your requests

We retain account records and saved creations to provide your account and generation history; content is not automatically discarded after generation. Billing, credit, and abuse-prevention records may also be retained for accounting, dispute resolution, security, or legal requirements. This service is not a permanent backup, so download files you want to keep.

You can contact us to request access, correction, or deletion of your account data and creations. We may need to verify account ownership and may retain records where necessary for the purposes above or required by law. Requests do not automatically cancel a subscription; manage renewal through your account’s billing portal as described in our Terms of Service.

Feedback and content reports

In-app feedback and content reports are stored in our database with your account ID, generation ID, selected category, message, review status, and timestamps. We use these records to investigate safety or quality issues, enforce our Acceptable Use Policy, respond, and handle appeals. If you report by email, we also process your sender contact details and the information you provide. Report records may be retained for support, security, disputes, or legal requirements as described above.

Your privacy rights

Depending on your location and applicable law, you may request access, correction, deletion, a portable copy of your data, or restriction of processing; object to processing based on legitimate interests; and withdraw consent for consent-based processing. Contact our support email to exercise these rights or request a human review of a welcome-credit decision. We respond within the timeframe required by applicable law and explain any permitted exception or extension. You may also complain to your local data-protection authority.

Browser settings can restrict cookies and local storage. This is separate from any consent controls required by local law. Requests about your data do not waive your statutory rights or require you to buy a plan.

Updates and contact

We will post policy updates here with a revised date. For privacy questions or account-data requests, email [email protected].