Privacy policy
Last updated 15 August 2026
This policy explains what data Gerador de Memes collects, why, how long we keep it, and what you can demand. It applies whether or not you have an account.
What we collect
If you create an account: email, password (stored as a hash, never in plain text), display name, avatar and preferred language. If you use the site without an account: an anonymous session identifier in a cookie, so the memes you make stay available to you and can be linked to an account if you sign up later. On every visit to a meme link: IP address, browser user-agent, referring page, approximate country and region, device type, and the channel the link was shared through.
About IP addresses
An IP address is personal data under Brazil's LGPD, and we treat it as such. We keep the full IP for 90 days. The legal basis is compliance with a legal obligation — article 15 of Brazil's Internet Civil Framework requires retention of access logs — together with legitimate interest in detecting abuse and fraud. After 90 days an automated process deletes the full IP and keeps only a truncated version, which does not identify a specific device and is used only for aggregate statistics.
What we use it for
To deliver the product: storing your memes, authenticating your account and serving images. To show you the metrics for your own links: how many people opened them, where they came from, on what device. With your consent, we use Google Analytics to measure visited pages, visit source, and general browser and device data. This helps us improve the site. For security: rate limiting, detecting automated use and responding to lawful requests. For the Terms of Responsibility acceptance record, which stores IP, user-agent, timestamp and the version of the text accepted — that is what gives the acceptance evidentiary weight.
Who we share it with
We do not sell your data and we do not hand it to advertisers. We share only with providers required to run the service (hosting, file storage and transactional email), with Google for measurement when you allow it, and where there is a court order or a lawful request from a competent authority.
How long we keep it
Full IP: 90 days, then truncated. Private meme: up to 24 hours, then deleted from the database and storage. Meme created without an account and never claimed: 90 days. Terms acceptance record: kept while there is a legitimate defence interest, even after account deletion — in that case the link to you is anonymised.
Your rights
You may request confirmation of processing, access to your data, correction, anonymisation, portability and deletion. Deleting your account anonymises your personal data and unlinks your memes. The Terms acceptance record is preserved in anonymised form, because it is evidence of a legal act already performed.
Cookies
We use required cookies to keep you signed in, remember your language and identify your anonymous session. Google Analytics starts with storage denied. If you accept analytics, Google may store measurement cookies. Advertising cookies remain denied. You can reject or change your choice at any time with the Cookie settings button in the footer.
How to reach us
To exercise any of the rights above or ask about this policy, use the contact channel in the footer. We reply within 15 days.