# privacy

THE APP

Memento collects no data. There are no accounts, no analytics, no
cookies, no server of ours, and nothing is sent to us — ever.

What leaves your phone:
  · your messages to the AI provider you configured, sent directly to
    that provider with your own API key, under that provider's terms;
  · with Memento Connect (an optional one-time purchase): your data,
    synced to YOUR OWN private iCloud database (Apple CloudKit), which
    we cannot read.

Your API key is stored in the iOS Keychain on your device only.
Your memory is a folder on your phone; you can export all of it at any
time (Settings → Export memory) and delete all of it at any time
(Settings → Delete all data).

THIS WEBSITE

This website is a separate thing from the app. It counts anonymous
page views with Vercel Analytics — cookieless, identifying no one: a
visitor is a hash of the request, discarded within a day, never linked
across sites.

If you join the mem.ber list, what is stored is: your email, your
optional phone number, the time you joined, your language, and your
browser's user-agent — in a database we operate (Neon, hosted in the
United States), solely to write to you about Memento. Reply to any
message to be removed.

See exactly what your connection reveals, live → /privacy#live

Questions: the address on the support page.
Last updated 2026-09-01.

privacy --live

THIS CONNECTION

[shown to you · stored by no one]

ip216.73.216.68

cityColumbus, OH, US

timezoneAmerica/New_York

served fromcle1

you accept—

browser(JavaScript is off, so this row stays empty)

system(JavaScript is off, so this row stays empty)

screen(JavaScript is off, so this row stays empty)

viewport(JavaScript is off, so this row stays empty)

scheme(JavaScript is off, so this row stays empty)

reduced motion(JavaScript is off, so this row stays empty)

cpu cores(JavaScript is off, so this row stays empty)

connection(JavaScript is off, so this row stays empty)

referrer(JavaScript is off, so this row stays empty)

this page cost you(JavaScript is off, so this row stays empty)

protocol(JavaScript is off, so this row stays empty)

If the city is wrong, something is protecting you — a VPN, a company network, or Apple's Private Relay.

THE ONE RECORD YOUR VISIT CREATES

timestamp · path · dynamic path · referrer · filtered query params ·
coarse geolocation · os + version · browser + version · device type ·
script version

no cookies · you are a hash of this request · discarded within a day · never linked across sites

WHAT WE KEEP

about this visit ........ nothing
if you join the list .... email · phone (optional) · time · language · user-agent
where ................... a database we operate (Neon, United States)
why ..................... to write to you about Memento
to be removed ........... reply to any message

WHAT WE DID NOT TAKE

canvas fingerprint ...... [not read]
webgl renderer .......... [not read]
audio fingerprint ....... [not read]
installed fonts ......... [not read]
cookies set ............. 0
localStorage ............ empty
cross-site identifier ... none

A website knows this much about a stranger because every website does. The app on your phone knows none of it — it has no server to know it with.