Privacy policy

Version of November 13, 2026

What goes over the network

Your photos and videos never leave your computer. Your browser still sends a few requests, listed here step by step. We recorded them on October 6, 2026 in Chrome's Network tab, on a test copy of the site. Four are described from our code, because we couldn't trigger them during that recording: sending the email, joining the January list, the error report and Cloudflare Web Analytics. The single-ZIP download, added after that recording, is described from our code too.

You open the site: The page, its code and its fonts come from our site. A “one visit” signal goes to our counter, with the code of the link that brought you here. The home page also asks that counter for the total number of recaps shown: it carries nothing about you or your export. The Cloudflare Web Analytics script loads from Cloudflare and counts each page view. When you open the tool, another signal only says whether it opened on a phone, on a computer whose browser can't save your Memories, or where it works. If the banner about the link of origin appears, your answer (accepted or declined) also goes to that counter, with the link code.
You drop your ZIPs, your recap shows up: When you drop files, a “drop” signal goes to our counter. When the recap shows up, a “one recap shown” signal follows. Both go with no number, no file name and no date. Your ZIPs are read on your computer.
You save your Memories: None of your files go anywhere. If your export has videos split into clips, your browser downloads the code that joins them from our site. If you get everything in a single ZIP, your browser also installs /download-sw.js, a script from our site. It turns the ZIP the page builds into a download, serves only that download and makes no request. At the end, a “save finished” or “save failed” signal goes to our counter and to Rybbit, with ranges only: trial or full export, a rough number of Memories (for example 2,000 to 9,999), a duration (for example 5 to 15 minutes) or why it stopped (for example disk full). Our counter also gets, in ranges: the number of ZIPs (1, 2 to 5, 6 or more) and their size (under 5 GB, 5 to 20 GB, over 20 GB) when the summary shows and if you leave the page before the end; and, when the save starts and when it ends, whether it is paid and the kind of device (iPhone or iPad, Android, computer). With the demo export, our counter gets three signals, nothing else: demo page opened, demo ZIP downloaded, demo ZIP dropped into the tool. Never an exact number, a file name or a date.
You pay: Our server opens checkout at Stripe. The form, its scripts and its cookies come from Stripe. After that, each time you open the tool, your browser has our server check your unlock token.
You ask for the link by email: When you click into the email field, the Cloudflare Turnstile anti-bot script loads. When you send, your address, your language, the reminder dates and the code of the link you followed go to our server. If it goes through, a “link sent” or “reminder requested” signal goes to our counter, without your address.
January list: When you click into the e-mail field, the Cloudflare Turnstile anti-bot script loads. On sending, your address and language go to our server, which passes them to Resend. A "joined the list" signal goes to our counter, without your address.
The tool crashes: A report goes to Sentry, in its European Union region: the error type and its message, our error code, the place in the code, the page and your browser. Before sending, we remove file names, e-mail addresses and anything that comes from your export from the message.

Check it yourself

In Chrome, open the developer tools (F12, or Cmd + Option + I on a Mac), go to the Network tab, reload the tool, then drop your ZIPs. You'll see three signals go to /api/count (tool opened, ZIPs dropped, recap shown), Cloudflare's page-view count, the page's own files (scripts, styles, fonts), possibly some “blob:” lines that stay in your browser, and none of your files.

You can also turn off Wi-Fi once the tool is open. The recap shows up and your Memories get saved to your folder. Two limits: payment needs the network, and without it, videos split into clips stay as separate clips, because the code that joins them downloads when you save.

Data controller

The data controller is Francois HATEM (KADMO), 63 avenue du Général Leclerc, 75014 Paris, France. For any question about your data: contact@getmemoriesout.com.

Who gets what, and for how long

The tool reads your ZIPs and saves your files in your browser, on your computer. A few pieces of information still go to a server: to take payment, unlock the tool, count visits, recaps and the steps of the journey, send you a reminder and catch the tool's crashes. Here's the full list.

Your photos and videos: What goesNot your files, not their names, not their dates, not how many there are.; To whomNobody.; For how longNever sent.
Payment: What goesYour card, your email address and the other fields of the checkout form. Stripe also gets the code of the link that brought you to the site, your country and your device type. Our purchase record keeps only the Stripe reference, the amount, the date of your consent and that code: no name, no email, no IP address. From some countries, Link, LLC, Stripe's payment service, sells the tool on our behalf and gets the same fields.; To whomStripe Payments Europe, Limited (Dublin, Ireland), under its own policy: https://stripe.com/privacy. The purchase record stays with us. For a sale through Link, also Link, LLC (Stripe).; For how longAt Stripe: under its own policy. Our purchase record is proof of your purchase.
Unlock and receipt link: What goesThe unlock token, either the one your browser keeps after payment or the one in your receipt link. It holds only a purchase reference and its signature. The receipt link also appears on the invoice Stripe sends you and keeps. After a sale through Link, Link sends the invoice. After every purchase, the link also goes out in an email we send you. To send it, our server gets your email address from Stripe, without keeping it.; To whomOur server, at Cloudflare, which checks it. Resend, Inc. (United States) sends the link email after every purchase: it gets your address and the email's text.; For how longNothing is kept beyond the purchase record, which also counts how many computers the receipt link has unlocked (3 at most). At Resend: the address and content of the link email, 30 days.
Counter: What goesA “one visit” or “one recap shown” signal, or a step of the journey (tool opened on a phone or a computer, ZIPs dropped, trial started or finished, payment opened, link or reminder requested by email), with the code of the link that brought you to the site (for example “ytfr” for a YouTube video, or “direct” with no link): no cookie, no identifier, nothing from your export. Your answer to the banner about the link of origin (accepted or declined) also counts as a signal.; To whomOur server, at Cloudflare.; For how longWe only keep a total per day and per link code, which can't identify you.
Link of origin kept 14 days (if you accept): What goesThe code of the link that brought you to the site (for example “ytfr”), with its end date, in your browser's local storage. No identifier, no cookie and nothing from your export is kept with it. It goes to our counter, our purchase record and Stripe like the tab's code. Your answer to the banner (accepted or declined) also goes to our counter, with the tab's code. If you decline, your browser keeps your refusal and its end date, but no link code beyond the tab.; To whomYour browser; then our server, at Cloudflare, and Stripe, like the tab's code.; For how long14 days after the last link you followed, then the site erases it. You can erase it sooner, from this page. Your refusal is kept for 6 months; this page does not erase it, clear the site's data in your browser to remove it.
Audience measurement: What goesEach time a page opens: the page address (Cloudflare doesn't keep what follows “?”), the page you came from, your country, the name of your browser and operating system, and loading times. No cookies, no identifier, nothing from your export. A page opened from a receipt link is not counted. A second measurement tool, Rybbit, runs on our own server in Paris (stats.getmemoriesout.com). It counts page views and four steps: an export dropped, the summary shown, the payment opened, the payment confirmed. It receives the page you came from, your country, your browser, your system, and how long the page takes to show and to respond (Web Vitals). No cookie, no IP address kept, nothing from your export; it recognises you for one day only. It also keeps a replay of your visit that shows the page, your clicks and how far you scrolled. It shows the text of the pages, the same for everyone, and never what you type: every field is masked. Photos, videos, file fields, your summary, the archive check result and the content of the reminder and unsubscribe pages are left out, and the numbers, years and folder names from your export are replaced by asterisks. No photo, file name or text from your export can be read in it. The page layout stays visible.; To whomCloudflare Web Analytics (Cloudflare, Inc., our host). It receives your IP address with the request, as for any page of the site.; For how longCloudflare keeps only totals (page views, visits, countries, browsers), which cannot identify you. Rybbit keeps the replay of your visit for 30 days, then deletes it.
Email reminder: What goesYour email address, your language and the code of the link that brought you here, only if you ask for a reminder. Four emails at most: one right away, then reminders at 1, 7 and 42 days if you ask from a phone, otherwise at 3 days, 7 days or both, as you choose. So we never send you the link twice, we also keep a SHA-256 fingerprint of your address.; To whomOur server, at Cloudflare, and Resend, Inc. (United States), which sends the emails: it gets your address and the text of each email, with its links. Before sending, Cloudflare Turnstile checks that a person made the request: it gets your IP address and signals from your browser, never your email address.; For how longYour address and language are deleted after the last reminder, 43 days after your request at the latest. The fingerprint too, after 43 days, even after you unsubscribe. The link at the bottom of every email opens a page where you confirm with a button. At Resend: the address and content of each email, 30 days.
January list: What goesYour e-mail address and language, only if you tick the box and sign up. At most 5 e-mails, about the Snapchat Memories archiving. We don't know whether you open them or click: they have no tracking image, and their links to our site don't go through Resend.; To whomResend, Inc. (United States) keeps the list and sends the e-mails; our server does not keep your address. Before the form is sent, Cloudflare Turnstile checks that a person is asking.; For how longUntil 28 February 2027 at the latest: sign-ups close on 31 January and deletion starts on 1 February. If you unsubscribe earlier, your address stays marked "unsubscribed" at Resend until then, so that no e-mail reaches you again. Resend keeps the content of each e-mail for 30 days.
Tool errors: What goesWhen the tool crashes or a save fails: the error type, our error code (for example “WRITE_FAILED”), where in our code it happened, the page address without anything after “?” or “#”, and the name and version of your browser and operating system. Never the error's text, and nothing from your export: no file name, folder, date or count.; To whomSentry (Functional Software, Inc.), in its European Union data region, in Frankfurt. It gets your IP address with the request and doesn't keep it.; For how long30 days, then deleted.
Host logs: What goesFor each request to our server: the address requested and your IP address.; To whomCloudflare, Inc., our host.; For how long7 days at most.

What allows us to process this data

The GDPR (Article 6) requires a reason for each processing. Here is ours, service by service.

Payment and purchase record: the contract you enter into by paying (Art. 6(1)(b)), and the obligation to keep invoices for 10 years (Art. 6(1)(c)).
Unlock and receipt link: the same contract (Art. 6(1)(b)).
Email reminder: your consent, which you withdraw by unsubscribing (Art. 6(1)(a)).
Anti-bot check (Turnstile): our interest in stopping bots from sending emails in bulk (Art. 6(1)(f)).
Counter and audience measurement: our interest in knowing how many people use the tool, with totals that can't identify you (Art. 6(1)(f)).
Tool errors: our interest in fixing what crashes (Art. 6(1)(f)).
Host logs: the security of the site (Art. 6(1)(f)).
Link of origin kept 14 days: your consent, which you withdraw whenever you like by erasing it from this page (Art. 6(1)(a)).

What your browser keeps

Until you pay, the site sets no cookies. Your browser keeps in its local storage the unlock token after a purchase, and the code of the link that brought you here only if you accept it, and your refusal with its end date if you decline (see below). The tab also keeps that code until you close it. None of it follows you from one site to another.

When checkout opens, Stripe sets its own cookies on this site (__stripe_mid and __stripe_sid), covered by its own privacy policy.

If you arrive through a link that carries a code (for example “gads”) and you accept, your browser keeps that code for 14 days in its local storage, so that a purchase made a few days later counts under the right link. Nothing else is kept: no cookie, no identifier, nothing from your export. It is used only to count your visits and your purchase under the right link. If you decline, your browser keeps your refusal and its end date, for 6 months, so as not to ask you again: no link code beyond the tab. If you do not choose, nothing is kept beyond the tab. You can erase the kept code at any time:

Your rights

You can ask to access, correct or delete your data, object to its processing, or ask for its restriction or portability. Email contact@getmemoriesout.com.

January list: the legal basis is your consent, which you can withdraw at any time through the link in each e-mail or by writing to us.

If you think your rights aren't being respected, you can file a complaint with the CNIL, the French data protection authority (www.cnil.fr).

Transfers outside the European Union

Our host, Cloudflare, Inc., is an American company, so data going through our server may be processed in the United States. Cloudflare participates in the EU-U.S. Data Privacy Framework, which the European Commission has recognized as adequate protection since its decision of July 10, 2023.

If you ask for a reminder, join the January list or make a purchase, Resend, Inc., an American company, sends the emails and keeps their data in the United States. The transfer is covered by the European Commission's standard contractual clauses and the EU-U.S. Data Privacy Framework.

Sentry (Functional Software, Inc.) is an American company too, participating in the same Data Privacy Framework, even though errors are stored in Frankfurt.