MemeBox

Privacy Policy

Last updated: 21 October 2026

The short version

Optional website analytics

On public pages at memebox.site, we use Google Analytics 4 only if you choose “Allow analytics”. Until you allow it, MemeBox does not load the Google Analytics tag or send requests to Google Analytics, including cookieless measurement pings. Choosing “Do not allow” keeps Google Analytics off. You can change your choice using “Privacy choices” on a public page. We also keep Google Analytics off when your browser signals Global Privacy Control or Do Not Track.

When allowed, Google receives public page views and technical information used to provide analytics, such as device/browser information and approximate location derived from the connection. Google can process your network address to deliver this service. Analytics cookies identify repeat visits. We set a 180-day cookie duration and remember your choice for up to 180 days, or until you clear browser storage. Withdrawing consent disables Google Analytics and clears this site's Google Analytics cookies.

We send canonical public page URLs without query strings or fragments, and only the referring website's origin. We do not send license keys, order recovery tokens, form entries, personal playlist labels, meeting URLs, call audio or camera footage. Checkout, feedback, admin, API, sandbox and preview pages do not load this integration. Google signals, advertising personalization and automatic enhanced measurement are disabled for this setup; no advertising tags are installed. This website integration is separate from the extension's optional basic feature counters.

Google processes analytics data under its own policies, including the Google Privacy Policy. The site works if you refuse analytics or if Google is blocked. Allowing analytics is not required to use MemeBox.

Cloudflare website performance measurements

We also use Cloudflare Web Analytics to measure website page views, visits and loading performance. Cloudflare automatically adds its performance script to pages served through our domain. This is separate from the optional Google Analytics integration: the “Allow analytics” and “Do not allow” buttons control Google Analytics, not Cloudflare’s automatic measurement. Our Cloudflare configuration excludes automatic measurement for visitors in the European Union.

Cloudflare describes this service as cookie-free and says it does not use browser storage or fingerprint visitors. It reports page paths, referring websites, browser/device categories and performance measurements such as Core Web Vitals. Cloudflare says it does not log URL query strings in Web Analytics. We do not add license keys, order recovery tokens, form entries, meeting content or personal media to its measurements. Browser privacy tools may block the script, and the website works when it is blocked. Cloudflare and Google use different counting and processing methods, so their visitor totals may differ.

See Cloudflare Web Analytics and the Cloudflare Privacy Policy for provider details.

Your microphone, tab audio and camera

On a supported call website, MemeBox mixes your real microphone with the meme audio you choose, inside your browser tab. The call website sends that mix to the call as it would send your normal microphone. The voice changer and the optional camera captions also work only inside your browser tab. When you send another tab's sound, only the tab you picked is mixed in, only after you click, and only until you stop. MemeBox processes sound levels and effects locally; it does not transcribe your conversation or upload your live feed to its servers. A recording you deliberately create in the clip editor stays on your device.

Lights & looks stays off until you select lighting, filters or companions. Hand reactions are enabled by default in version 2.0.0 when you use your camera on a supported call website, independently of the Lights switch: an index-point gesture can play the bundled cat laugh, a middle-finger hold or visual thumb/middle snap can trigger dust, and two raised open palms can show the seven-second Cinema image. You can turn each trigger off in Lights, or use Normal meeting · turn everything off to stop effects, voice changes, media and gestures. Your explicit off choices are remembered.

Bundled face, hand and person models process small camera frames locally while the corresponding reactions or Follow me are enabled. This is gesture/position processing, not identity recognition or general sign-language interpretation. Camera frames, landmarks and person masks are not uploaded to MemeBox. Snap keeps a temporary in-memory history of genuinely visible room pixels; it does not fabricate or blur unseen scenery. Full disappearance needs those room pixels to have been observed. Until that room history is ready, Snap shows preparation guidance and does not start a partial disappearance. This room history is cleared by Normal meeting and when its camera renderer is released; it is never written to persistent storage. The private gesture guide is not drawn into your outgoing camera, but can be visible if you share your whole screen.

Data on your device

Your lines, imported clips, personal music, pictures and settings are stored on your device. Playing them into a call sends the selected audio or picture through the call service; exporting shares the file you choose. They are not automatically published to other MemeBox users. Uninstalling the extension removes its saved extension data. Website preferences remain in that website’s browser storage until you clear them.

Music room and YouTube

Everyone in call in the player or call panel asks you to select the player tab and enable tab audio in the browser sharing dialog. An audio-only WebRTC connection forwards that sound directly to your meeting microphone output through the extension. The selected screen video is not forwarded. No relay server is used and MemeBox does not save the stream. Only me, Stop sharing, closing the player or leaving the call disconnects it.

Original tunes are synthesized on your device. Private playlist labels, links, language choices and self-declared strong-language preferences are saved in your browser. The website player receives the selected playlist or video reference when you choose to play; private labels are passed in the URL fragment, which is not sent to the web server. They are not published in the shared catalog.

YouTube is contacted when you select its player. It receives information needed to deliver the video, including your network address and browser information, and may use ads, cookies or other identifiers under its own policy. MemeBox uses the visible privacy-enhanced YouTube player; it does not remove ads, download its audio or bypass age/region restrictions. Sending the player tab into a call also sends any ad audio.

Browsing published MemeBox collections requests the owner-managed catalog from our site. Personal collections stay separate. Strong-language markers and the 18+ preference are self-declared; they are not verified age checks or automatic classification of unknown videos.

Feedback form and uninstall survey

If you enable “Share basic feature usage”, MemeBox sends daily counters containing only a feature and safe built-in item ID, such as character:panda. A random installation ID is one-way hashed before storage; an active license key may be associated so the owner can understand paid usage. MemeBox never includes meme text, captions, filenames, call audio/video, meeting URLs or contacts. This setting is off by default, can be switched off at any time, and counters are retained for up to 400 days.

The extension opens our feedback page with only the MemeBox version and the call site in the link, for example ?v=1.0.0&site=meet. When you uninstall, a one-question survey opens. Answering is optional.

If you send a form, we store what you picked or typed (rating, features used, ideas, message, where you used MemeBox and which device, both picked from a list, and your email only if you type one), the version, the call site, the page language and the time. We don't store your IP address or browser details. To stop spam, we count messages per hour using a one-way hash of your IP address and delete that count after the hour. The form uses Cloudflare Turnstile as a spam check. Answers are kept in a Cloudflare D1 database that only the developer can read.

Buying Pro and license keys

If you buy something on the /buy page, we store your product, amount, currency, order time, order status and the license key it gives. Manual UPI orders also store the transaction ID (UTR) you submit. Gateway orders store payment and refund identifiers and a hashed recovery token. Your browser keeps the recovery token so you can return to your order. Clearing browser storage removes that recovery shortcut.

Manual payments happen in your UPI app. When a supported payment-provider checkout is enabled, that provider processes payment information under its own privacy policy. Razorpay processes the contact and payment information you enter into its checkout under its own privacy policy. MemeBox stores provider payment/refund identifiers, not your card or banking credentials. Cashfree checkout is not active on the public website. In Cashfree sandbox checkout, a phone number you enter is sent to Cashfree as required for its order flow; MemeBox does not save that phone number in its order records. MemeBox does not collect your card number, CVV, bank password or UPI PIN. A checkout labelled Test uses simulated payments and does not collect real money. Your browser keeps test and live purchase recovery separately.

For verified Razorpay purchases, MemeBox also stores the buyer email and phone supplied by Razorpay, payment method, bank or wallet name when available, and payment references. These details are available only in the private admin panel and owner purchase/refund notifications. If enabled, Resend delivers those transactional notifications to the owner. We do not require a separate MemeBox email account to buy, and we do not infer an email address the provider has not supplied. These records support delivery, reconciliation, refunds and purchase support; they are not sent to website analytics.

For time passes, we store signed usage-session records and cumulative reported seconds to reconcile retries. We do not store call recordings, meeting conversations or camera footage.

If you enter a license key in MemeBox, the extension sends only that key to our site, to check it (about once a day). We store the day of the last check. Saved personal media is not uploaded to MemeBox servers; you choose what to send through your call or export.

Optional purchase recovery uses the email supplied with your payment. If you request recovery, Resend sends a single-use sign-in link that expires after 15 minutes. MemeBox stores your email and a hash of that token. Signing in sets a secure, HTTP-only purchases cookie lasting up to 24 hours; the server stores only a hash of the session token. Signing out removes that session. Free extension use does not require email sign-in.

Contact

Optional purchase recovery: if you request email sign-in, we match the email supplied with verified purchases and send a single-use link through Resend. The token is stored only as a hash and expires after 15 minutes. A private, HttpOnly sign-in cookie lasts up to 24 hours; its server-side token is also hashed. You can sign out at any time. Free features do not require this account, and saved receipt files or purchase keys remain an alternative. We do not send purchase identities or recovery tokens to website analytics.

Questions, or want a message deleted? Email memebox.help@gmail.com.