Cookie Policy
Effective Date: January 15, 2025
Quick Summary
Memento AI uses cookies to provide essential functionality (authentication), remember your preferences (theme, language), and analyze how our service is used (Google Analytics, Microsoft Clarity). You can manage your cookie preferences at any time.
1. Introduction
Memento AI ("we", "our", or "us") uses cookies and similar tracking technologies on our website and services at https://mementoai.net/. This Cookie Policy explains:
- What cookies are and how they work
- What types of cookies we use and why
- How you can manage your cookie preferences
- How cookies relate to your privacy
By continuing to use our website, you consent to our use of cookies as described in this policy. This Cookie Policy should be read together with our Privacy Policy and Terms of Service.
2. What Are Cookies?
2.1 Definition
Cookies are small text files that are placed on your device (computer, smartphone, or tablet) when you visit a website. They contain information that is transferred to your device's hard drive and allow websites to recognize your device on subsequent visits.
2.2 How Cookies Work
When you visit our website, we may place cookies on your device. These cookies store information such as:
- Your login session (so you don't have to sign in repeatedly)
- Your preferences (like theme choice or language selection)
- Analytics data (to understand how you use our service)
2.3 Similar Technologies
This policy also covers similar tracking technologies, including:
- Web beacons: Small graphic images embedded in web pages or emails
- Pixels: Tiny transparent images used for tracking
- Local storage: Browser-based storage (like localStorage and sessionStorage)
- Scripts: JavaScript code that collects information about your interactions
Throughout this policy, we refer to all of these technologies collectively as "cookies."
3. Types of Cookies We Use
3.1 Essential Cookies (Always Active)
These cookies are necessary for the website to function properly. They enable core functionality such as security, authentication, and network management. You cannot opt-out of these cookies as the service would not work without them.
Essential Cookies We Use:
- Authentication cookies (Better Auth): Keep you logged in and maintain your session
- Security cookies: Protect against cross-site request forgery (CSRF) attacks
- Load balancing cookies: Distribute traffic across our servers for optimal performance
Legal basis: These cookies are strictly necessary for the provision of services you have requested (GDPR Article 6(1)(b) - contractual necessity).
3.2 Functional Cookies (Optional)
These cookies enable enhanced functionality and personalization. They remember your choices and preferences to provide a more personalized experience.
Functional Cookies We Use:
- Theme preference: Remember if you prefer light or dark mode
- Language preference: Store your language choice (English/中文)
- UI preferences: Remember your interface customizations
Legal basis: Your consent (GDPR Article 6(1)(a)). You can disable these, but some features may not work as expected.
3.3 Analytics and Performance Cookies (Optional)
These cookies help us understand how visitors interact with our website by collecting and reporting information. All data is collected anonymously and used solely to improve our service.
Analytics Cookies We Use:
- Google Analytics: Tracks user behavior, page views, session duration, and traffic sources
- IP anonymization enabled (last octet removed)
- No personally identifiable information collected
- Microsoft Clarity: Records user sessions (anonymized) to understand interaction patterns, clicks, scrolls, and navigation
- Session replays are anonymized (sensitive data masked)
- Helps identify usability issues and improve UX
Legal basis: Your consent (GDPR Article 6(1)(a)). You can opt-out of these cookies without affecting core functionality.
3.4 What We Don't Use
For transparency, we want to clarify that Memento AI does NOT use:
- ❌ Advertising cookies or remarketing pixels
- ❌ Third-party advertising networks
- ❌ Social media tracking pixels (Facebook Pixel, Twitter, etc.)
- ❌ Affiliate marketing cookies
- ❌ Cross-site tracking for profiling purposes
4. Detailed Cookie List
Below is a comprehensive list of all cookies used on our website, including their purpose, duration, and type:
| Cookie Name | Purpose | Duration | Type |
|---|---|---|---|
| better-auth.session_token | Maintains your login session after Google OAuth authentication | 30 days | Essential |
| better-auth.csrf_token | Protects against cross-site request forgery attacks | Session | Essential |
| next-themes | Stores your theme preference (light/dark mode) | 1 year | Functional |
| NEXT_LOCALE | Remembers your language preference (en/zh) | 1 year | Functional |
| _ga | Google Analytics - distinguishes unique users | 2 years | Analytics |
| _ga_* | Google Analytics - maintains session state | 2 years | Analytics |
| _gid | Google Analytics - distinguishes users (24-hour window) | 24 hours | Analytics |
| _clck | Microsoft Clarity - persists Clarity user ID | 1 year | Analytics |
| _clsk | Microsoft Clarity - connects multiple page views in a session | 1 day | Analytics |
| CLID | Microsoft Clarity - identifies sessions from the same user | 1 year | Analytics |
| MUID | Microsoft Clarity - identifies unique browsers | 1 year | Analytics |
| SM | Microsoft Clarity - synchronizes data across Microsoft services | Session | Analytics |
| cookie_consent | Stores your cookie preference choices | 1 year | Essential |
5. Third-Party Services and Cookies
Some cookies on our website are set by third-party services we use to provide functionality and analytics. These third parties have their own privacy policies:
5.1 Google (Analytics & OAuth)
- Service: Google Analytics (analytics) and Google OAuth (authentication)
- Cookies set: _ga, _gid, _ga_*
- Purpose: Track website usage and enable Google sign-in
- Privacy policy: policies.google.com/privacy
- Opt-out: Google Analytics Opt-out Browser Add-on
5.2 Microsoft (Clarity)
- Service: Microsoft Clarity (user behavior analytics)
- Cookies set: _clck, _clsk, CLID, MUID, SM
- Purpose: Record anonymized user sessions to improve UX
- Privacy policy: privacy.microsoft.com/privacystatement
- Data processing: All sensitive input (passwords, credit cards) is automatically masked
5.3 Creem (Payment Processor)
- Service: Payment processing for subscriptions and one-time purchases
- Cookies set: Managed by Creem's secure checkout pages
- Purpose: Process payments and prevent fraud
- Privacy policy: creem.io/privacy
- Note: Creem cookies are only set during checkout and are not used for tracking
5.4 Cloudflare (CDN & Security)
- Service: Content delivery and DDoS protection
- Cookies set: __cflb, __cf_bm (bot management)
- Purpose: Ensure website availability and protect against attacks
- Privacy policy: cloudflare.com/privacypolicy
- Classification: Essential (security cookies)
6. Managing Your Cookie Preferences
6.1 Cookie Consent Banner
When you first visit our website, you'll see a cookie consent banner that allows you to:
- ✅ Accept all cookies: Essential, functional, and analytics cookies
- ⚙️ Customize preferences: Choose which types of cookies to allow
- ❌ Reject non-essential: Only use essential cookies required for the service to function
You can change your preferences at any time by clicking the "Cookie Settings" link in the footer or visiting your Account Settings.
6.2 Browser Settings
Most web browsers allow you to control cookies through their settings preferences. Here's how to manage cookies in popular browsers:
- Google Chrome: Settings → Privacy and security → Cookies and other site data
Guide: support.google.com/chrome/answer/95647 - Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data
Guide: support.mozilla.org - Apple Safari: Preferences → Privacy → Manage Website Data
Guide: support.apple.com/safari - Microsoft Edge: Settings → Privacy, search, and services → Cookies and site permissions
Guide: support.microsoft.com/edge
6.3 Do Not Track (DNT)
Some browsers offer a "Do Not Track" (DNT) signal. Currently, there is no universal standard for how websites should respond to DNT signals. However, we respect your privacy choices:
- If you reject analytics cookies through our cookie banner, we will not load Google Analytics or Microsoft Clarity regardless of your DNT setting
- Essential cookies (authentication, security) will still be used to provide core functionality
6.4 Mobile Devices
If you access our website through a mobile browser, you can manage cookies through your device settings:
- iOS (Safari): Settings → Safari → Privacy & Security → Block All Cookies
- Android (Chrome): Chrome app → Settings → Site settings → Cookies
7. Impact of Disabling Cookies
You have the right to disable cookies, but please note the following impacts:
7.1 If You Disable Essential Cookies
⚠️ Major Impact - Service Will Not Function
- You will not be able to log in (authentication requires session cookies)
- Your shopping cart and checkout will not work
- Security protections against CSRF attacks will be disabled
- Core features like portrait generation will be inaccessible
7.2 If You Disable Functional Cookies
⚠️ Moderate Impact - Reduced Convenience
- Your theme preference will not be saved (resets to default each visit)
- Your language choice will not persist
- You'll need to reconfigure settings on every visit
- Overall experience will be less personalized
7.3 If You Disable Analytics Cookies
✅ No Impact - Full Functionality Preserved
- All core features will continue to work normally
- You can still log in, generate portraits, and make purchases
- Your privacy will be enhanced (no anonymous usage tracking)
- You help us less in improving the service (we won't see anonymized usage patterns)
8. International Data Transfers
Some of our third-party cookie providers are based outside your country of residence. When you consent to analytics cookies, your data may be transferred to:
- United States: Google Analytics, Microsoft Clarity servers
- European Union: Some data processing occurs in EU data centers
8.1 Data Protection Safeguards
For data transfers to countries without adequate data protection laws, we rely on:
- EU Standard Contractual Clauses (SCCs): Google and Microsoft have implemented SCCs for EU data transfers
- Data Processing Agreements (DPAs): We have DPAs in place with all third-party processors
- Privacy Shield successor mechanisms: Adherence to EU-US data transfer frameworks where applicable
9. Children's Privacy
Our service is not directed to children under the age of 16, and we do not knowingly collect personal information from children through cookies. If you are a parent or guardian and believe your child has provided us with information through cookies, please contact us at support@mementoai.net.
10. Updates to This Cookie Policy
10.1 Policy Changes
We may update this Cookie Policy from time to time to reflect:
- Changes in our cookie usage practices
- New cookies added or removed
- Updates to legal requirements (GDPR, CCPA, etc.)
- Improvements to our services
10.2 Notification of Changes
When we make significant changes:
- Updated effective date: Posted at the top of this page
- Cookie banner reset: You may be asked to review your preferences again
- Email notification: For material changes affecting your rights (sent to active users)
We encourage you to review this Cookie Policy periodically to stay informed about our use of cookies and related technologies.
11. Your Rights Under GDPR and CCPA
11.1 European Union (GDPR)
If you are located in the European Economic Area (EEA), you have the following rights:
- Right to access: Request a copy of data collected via cookies
- Right to rectification: Correct inaccurate cookie data
- Right to erasure: Delete cookies by clearing your browser or contacting us
- Right to object: Object to analytics cookies (opt-out available)
- Right to data portability: Receive your data in a structured format
- Right to withdraw consent: Change your cookie preferences at any time
11.2 California (CCPA)
If you are a California resident, you have:
- Right to know: What personal information is collected via cookies
- Right to delete: Request deletion of cookie data
- Right to opt-out: Opt-out of the "sale" of personal information (note: we do not sell your data)
- Right to non-discrimination: We will not discriminate against you for exercising your rights
To exercise any of these rights, contact us at support@mementoai.net or visit your Account Settings.
12. Contact Us
If you have any questions about this Cookie Policy, our use of cookies, or wish to exercise your rights, please contact us:
- Email: support@mementoai.net
- Subject Line: "Cookie Policy Inquiry"
- Response Time: 1-2 business days for general inquiries, 30 days maximum for data rights requests
For Data Protection Inquiries:
If you have concerns about our cookie practices or data protection, you also have the right to lodge a complaint with your local data protection authority.
Memento AI
Copyright © 2025 Memento AI. All rights reserved.
Related Policies
For a complete understanding of how we handle your data, please also review:
- Privacy Policy - Comprehensive data protection practices
- Terms of Service - User agreement and service terms
- Refund Policy - Quota restoration and monetary refunds
