Skip to content
← Back to Gallery

Privacy Policy

Last updated: August 9, 2026

1. What We Collect

We collect the minimum data necessary to operate the service:

  • Lightning public key — your authentication identifier, derived from your Lightning wallet. We never ask for your real name.
  • Email address — only if you give us one. You need an email to sign in by magic link, to be notified when an image you requested is added, or to file a takedown notice (required there, so we can confirm we received it); it is optional when you send feedback. Accounts created with a Lightning wallet alone have no email on file.
  • Uploaded images — images you upload, plus AI-generated metadata (captions, tags, text extraction).
  • IP address — recorded at upload time for legal compliance and abuse prevention only. Not used for tracking or advertising.
  • Wallet transactions — internal ledger of zaps, deposits, and withdrawals associated with your account.

2. What We Don’t Collect

  • No real names, ever
  • No email address is required to use MemeStack — signing in with a Lightning wallet needs none (see section 1 for the cases where we do hold one)
  • No third-party analytics or tracking scripts (currently)
  • No cross-site tracking cookies (currently)
  • Original filenames are stripped at upload — we do not store them

3. How We Use Your Data

  • Authentication — LNURL-auth verifies your Lightning key pair
  • Content serving — displaying, searching, and recommending images
  • AI moderation & tagging — automated content analysis for search quality and safety
  • Legal compliance — NCMEC reporting when required by law (see Terms of Service)

4. Lightning Wallet

MemeStack maintains a custodial sats balance for your account. Deposits and withdrawals are processed through the Blink Lightning API. Your transaction history (zaps, deposits, withdrawals, transfers) is stored in our database. Blink processes Lightning payments on our behalf — refer to Blink’s Privacy Policy for their data handling practices.

5. Browser Extension

The MemeStack browser extension sends to api.memestack.ai only the images you explicitly choose to save, together with your login token — and, if you switch on the optional default hint in its settings, the text you typed there. The web address an image came from is kept on your device to label the save in the extension’s own list, and is never transmitted.

The extension asks for access to all sites because you can save an image from any site. A small script does run on the pages you visit, purely so that a right-click knows which image you meant; it reads the page only when you actually choose “Save to MemeStack”, and it reports nothing otherwise. The extension does not collect, store, or transmit your browsing history, and it contains no analytics or tracking of any kind.

One request goes somewhere other than us, and it exists to protect you. Before downloading an image, the extension asks Cloudflare’s public DNS resolver (1.1.1.1) where that image’s domain points, so it can refuse to fetch anything that resolves to a device on your own network — a router, a NAS, an internal server. Without that check, a hostile page could point an image at your private network and have the extension upload whatever came back. Only the domain name is sent, and only for an image you chose to save; never the page you were on, never the image, never anything identifying you. Cloudflare’s handling of those lookups is covered by their public resolver privacy policy.

The token the extension holds is deliberately restricted: it can upload images and read the status of your own saves, and it is refused by our servers on everything else — your wallet included. Logging out of the extension discards it.

6. Cookies & Advertising

MemeStack currently does not use third-party cookies or ad tracking. When our advertising partner is activated, they may set cookies for ad targeting and measurement. You can manage cookies through your browser settings. We will display a cookie consent notice when advertising is enabled.

7. Data Retention

  • Images are retained while your account is active and removed upon your request, except where legally required (e.g., content subject to a NCMEC report cannot be deleted).
  • IP addresses are retained for legal compliance only.
  • Account data is removed on request.
  • Wallet transaction history is retained as long as your account exists.

8. Data Sharing

We do not sell your data. We share data only when required by law:

  • Law enforcement — NCMEC/CSAM reporting as legally mandated
  • Advertising partner — anonymized impression and click data only, when ad network is activated

9. Children

MemeStack is not intended for users under 18. We do not knowingly collect personal data from minors.

10. Changes

We may update this policy at any time. Continued use of the service constitutes acceptance of the updated policy.

11. Contact

For privacy-related questions or data removal requests, email us at contact@memestack.ai.