Privacy policy

01

What goes over the network

You open the site

The page, its code and its fonts come from our site. A “one visit” signal goes to our counter, with the code of the link that brought you here. The Cloudflare Web Analytics script loads from Cloudflare and counts each page view. When you open the tool, another signal only says whether it opened on a phone, on a browser that can't save into a folder, or where it works.

You drop your ZIPs, your recap shows up

When you drop files, a “drop” signal goes to our counter. When the recap shows up, a “one recap shown” signal follows. Both go with no number, no file name and no date. Your ZIPs are read on your computer.

You save your Memories

None of your files go anywhere. If your export has videos split into clips, your browser downloads the code that joins them from our site.

You pay

Our server opens checkout at Stripe. The form, its scripts and its cookies come from Stripe. After that, each time you open the tool, your browser has our server check your unlock token.

You ask for the link by email

When you click into the email field, the Cloudflare Turnstile anti-bot script loads. When you send, your address, your language and the reminder dates you picked go to our server. If it goes through, a “link sent” or “reminder requested” signal goes to our counter, without your address.

The tool crashes

A report goes to Sentry, in its European Union region: the error type, our error code, the page and your browser. The report holds nothing from your export.

02

Check it yourself

03

Data controller

04

Who gets what, and for how long

Your photos and videos

What goesNot your files, not their names, not their dates, not how many there are.

To whomNobody.

For how longNever sent.

Payment

What goesYour card, your email address and the other fields of the checkout form. Stripe also gets the code of the link that brought you to the site. Our purchase record keeps only the Stripe reference, the amount, the date of your consent and that code: no name, no email, no IP address.

To whomStripe Payments Europe, Limited (Dublin, Ireland), under its own policy: https://stripe.com/privacy. The purchase record stays with us.

For how longAt Stripe: under its own policy. Our purchase record is proof of your purchase.

Unlock and receipt link

What goesThe unlock token, either the one your browser keeps after payment or the one in your receipt link. It holds only a purchase reference and its signature. The receipt link also appears on the invoice Stripe sends you and keeps.

To whomOur server, at Cloudflare, which checks it.

For how longNothing is kept beyond the purchase record, which also counts how many computers the receipt link has unlocked (3 at most).

Counter

What goesA “one visit” or “one recap shown” signal, or a step of the journey (tool opened on a phone or a computer, ZIPs dropped, link or reminder requested by email), with the code of the link that brought you to the site (for example “ytfr” for a YouTube video, or “direct” with no link): no cookie, no identifier, nothing from your export.

To whomOur server, at Cloudflare.

For how longWe only keep a total per day and per link code, which can't identify you.

Audience measurement

What goesEach time a page opens: the page address (Cloudflare doesn't keep what follows “?”), the page you came from, your country, the name of your browser and operating system, and loading times. No cookies, no identifier, nothing from your export. A page opened from a receipt link is not counted.

To whomCloudflare Web Analytics (Cloudflare, Inc., our host). It receives your IP address with the request, as for any page of the site.

For how longCloudflare keeps only totals (page views, visits, countries, browsers), which cannot identify you.

Email reminder

What goesYour email address and language, only if you ask for a reminder. Three emails at most: one right away, then a reminder at 3 days, 7 days or both, as you choose. So we never send you the link twice, we also keep a SHA-256 fingerprint of your address.

To whomOur server, at Cloudflare, and Resend, Inc. (United States), which sends the emails: it gets your address and the text of each email, with its links. Before sending, Cloudflare Turnstile checks that a person made the request: it gets your IP address and signals from your browser, never your email address.

For how longYour address and language are deleted after the last reminder, 8 days after your request at the latest. The fingerprint too, after 8 days, even after you unsubscribe. The link at the bottom of every email opens a page where you confirm with a button. At Resend: the address and content of each email, 30 days.

Tool errors

What goesWhen the tool crashes or a save fails: the error type, our error code (for example “WRITE_FAILED”), where in our code it happened, the page address without anything after “?” or “#”, and the name and version of your browser and operating system. Never the error's text, and nothing from your export: no file name, folder, date or count.

To whomSentry (Functional Software, Inc.), in its European Union data region, in Frankfurt. It gets your IP address with the request and doesn't keep it.

For how long30 days, then deleted.

Host logs

What goesFor each request to our server: the address requested and your IP address.

To whomCloudflare, Inc., our host.

For how long7 days at most.

05

What your browser keeps

06

Your rights

07

Transfers outside the European Union