Meme2Print

Privacy Policy

Last updated: 17 September 2026

This policy explains what we collect, how we use it, who else receives it, and how long we keep it. We try to collect as little as possible and to keep your images private.

What we collect

  • The group photo you upload to generate a poster.
  • Your email address, used to send order and preview updates.
  • Your shipping address, collected only for orders that include a physical print, used to deliver it.
  • For a paid order, the billing country reported by our payment processor, kept for tax records. A free download takes no payment, so we collect no billing details for it.
  • Technical data: your IP address and browser signals, used for the human check, request limits, error reports and to pre-select a shipping country.
  • Anything you send us through the contact form.

How we use it

We use your photo to generate the poster preview, your email to send order and preview updates, and your shipping address, when we collect one, to fulfill and deliver a physical order. We do not sell your information and do not use it to advertise to you. The one advertising use is measurement: if you came here from a TikTok ad, we tell TikTok that the visit produced a poster or an order, as described under Ad measurement in Service providers below.

We also keep the photo you upload for about 3 days so we can look into a poster that failed or came out wrong, which is the only way to tell a broken render apart from a photo our checks could not work with. Only we can open it, we use it for nothing else, and it is deleted automatically after that. See Our key commitments below.

Preview updates means this: once a day at most, if you have made a poster, we email you one link to the posters you have made, so you can come back to them from any device before they are deleted. It is the only way to reach you if you close the tab before ordering. Every one of those emails carries a one-click unsubscribe, and the page it opens lets you delete your posters and stop the emails. We send no other unrequested email.

Before a poster is generated, automated checks run on your photo: a face detection step counts the people and estimates their ages, so that a photo that appears to include someone under 18 is accepted only when you have confirmed that you are that person's parent or legal guardian, or have that guardian's permission, and its result also guides how the photo is framed. The finished poster is checked automatically against our Content Policy, and more strictly when the photo includes a child. These checks decide only whether a poster can be made; if your photo is refused and you think that is wrong, contact us.

To keep the free preview fair we keep daily counters keyed by a keyed hash of your IP address and of your email address. They reset daily and cannot be turned back into the original values. Short-term request limits by IP address are held in memory only.

Photos that include children

You must be 18 or older to use Meme2Print, but the people in the photo can be any age. If anyone in the photo is under 18, you confirm before the poster is generated that you are that person's parent or legal guardian, or that you have that guardian's permission. That confirmation is the legal basis on which we handle the child's image, and we record the time you gave it.

The photo is handled on the same terms as any other, and we want to be exact about what that now means: we keep it for about 3 days in private storage, so we can look into a poster that failed or came out wrong, and after that it is deleted automatically. Only we can open it, and we never publish it. The poster is deleted on the same schedule as any other: about 3 days for an unpaid preview, and about 90 days for the files of a paid order. If you would rather we did not hold the photo for those 3 days, ask us and we will delete it sooner.

These posters are made in a restricted mode: only the illustrated styles are available, photo-real styles are not offered for these photos, and the finished poster goes through stricter automated content checks. We never use these posters or the photo behind them for advertising, marketing or audience measurement, never to train AI models, and never to build a profile of anyone in them.

A parent or legal guardian can ask us to delete a poster at any time. See Takedown & Deletion.

Our key commitments

  • We keep the photo you upload for about 3 days, in private storage that is not publicly reachable, so we can look into a poster that failed or came out wrong. After that it is deleted automatically, including for paid orders, where only the poster itself is kept longer. It is never published, never used for advertising or profiling, and never used to train AI models. The processors listed above still receive a copy in order to do their part of that work.
  • We never publish your posters. You can create a share link yourself, and anyone you send it to can open that one poster, download it, and order a printed copy of it for themselves. Before they can order a print they have to confirm that everyone in the photo is happy for them to. If the poster was made under our parent or guardian setting, it cannot be ordered as a print from a share link at all.
  • Unnecessary metadata, such as EXIF location and device data, is stripped from your photo on upload.
  • We do not train AI models on your photos.
  • Unpaid preview renders are automatically deleted after about 3 days.
  • Order files, whether they belong to a free download or to a paid print, are retained for about 90 days to support reprints, redownloads, and support requests, then deleted. Once they are deleted, the download link stops working. Order records without images are kept longer to handle disputes and to meet accounting rules.
  • Messages you send us through the contact form are kept for about 180 days so we can follow up on support and disputes, then deleted automatically. You can ask us to delete one sooner.
  • Your digital download link is private, tied to your order or download, and served without caching, so it is not stored or reused outside it.
  • A share link you create opens, downloads and reprints that one poster, and nothing else. It gives no access to your order, your email address or anything else you have made, and someone who orders a print through it places their own separate order: they pay for it, it ships to their address, and their order tells them nothing about yours. The link stops working if the order is refunded or cancelled, if you ask us to delete it, and once the files reach the end of the retention period above. Deleting your own poster therefore stops anybody ordering a print of it. Somebody who had already paid is refunded automatically if we had not yet prepared their print file; once that file is prepared, their print is made and shipped. Note that when you send a share link through a messaging app or a social network, that service usually fetches the poster to build its own link preview and keeps a copy of that preview on its own servers, which we cannot reach or delete.
  • You can request deletion of your images or order at any time. See Takedown & Deletion.

Service providers

To run the service we rely on the providers below. Each one receives only what it needs for its task and processes it under its own privacy policy.

  • Image generation: Venice AI (United States). Receives a resized copy of your photo with its metadata removed, plus the text prompt for the world you picked, to render the poster. It later receives the finished poster to enlarge it for print and to run our automated content check. For image generation Venice may pass the request to an upstream model provider in anonymised form, with identifying request details removed; Venice's own retention and training terms are set out in its privacy policy. We never send your email or address with the photo.
  • Face detection: Amazon Web Services, Amazon Rekognition (United States). Receives your photo to count the faces and estimate ages, which is how we check whether a photo needs parent or guardian consent before a poster can be made, and the finished poster to check that nobody is cut off by the frame. We keep only the resulting counts and face positions, never the image, for up to 90 days to tune this check.
  • Bot protection: Cloudflare Turnstile. When you press Cook mine, Cloudflare checks that you are a person. It receives your IP address and technical signals from your browser. The check is usually invisible; sometimes it asks for one tap. Passing it once covers you for 30 minutes (see Cookies below).
  • Payments: Stripe. Your card or wallet details are entered on Stripe's checkout page and never reach our servers. We receive the payment status, the email address confirmed at checkout, the billing country and, for print orders, the shipping address you enter there.
  • Printing and delivery: Gelato. Our print-on-demand partner. It receives your name, shipping address, the print-ready poster file and an email address for delivery notices (yours, or our order mailbox), and passes the address on to its carriers.
  • Hosting and storage: Vercel. Runs the site and holds the photo you upload, your posters and your order files in private storage that is not publicly reachable. It also derives an approximate country from your IP address, which we use only to pre-select a shipping country on the poster page and do not store on its own, and counts for us, without cookies or any other storage on your device, which pages are visited and which steps of the poster flow are reached: a style was picked, a photo was loaded (its file type and size), the consent box was ticked, the cook button was pressed, the human check appeared, an earlier poster was resumed, a preview succeeded or failed, a print size or shipping country was picked, a checkout was started, an order completed and what it was worth, and diagnostics when a photo fails to upload. On the home page and the studio page we also keep the campaign tags (the parts of a link that start with utm_) of the link that brought you here, so we can tell which ad or post a visit came from. We strip the parts of a web address that can open your poster, your order or your gallery before any of that is sent, and we never send your photo, your email address or your name.
  • Email: Resend. Sends our order and preview emails to your address.
  • Error monitoring and session recording: Sentry (European Union). Receives technical error reports (the page or request path and the error details) when something breaks, and a recording of how our pages are used: where you clicked, where you scrolled, where you typed and how long each step took. The recording shows our pages with our own labels and artwork readable. Before it leaves your browser, everything you type, the title and subtitle on your poster and your delivery address are replaced by asterisks, every image, including your photo and your posters, is replaced by a blank box, and every link that opens your poster, your order or your gallery is replaced by an empty box, so a recording shows which buttons were used, never what you uploaded, wrote or received. The recording stops the moment you choose the parent or guardian setting and stays off for the rest of that page; a page you open afterwards, such as your download page, is recorded again under the same rules. It sets no cookie and stores nothing on your device. Your IP address reaches Sentry with the connection, as it does with any server, and we have switched on Sentry's setting not to store it. We do not send your email address or your name. Recordings are kept for up to 90 days.
  • Ad measurement: TikTok. Only if you arrived here from a TikTok ad. The link you followed carries a TikTok click id, which the studio page sends us with your photo and which we then keep with your studio session, so it is deleted when that session is, within about four days, or sooner if you ask us to delete your posters. While it is there, our server tells TikTok when that visit finished a poster preview, claimed the free download, started a print checkout or paid for a print, with the order value where there is one and the IP address and browser type of that request where we have them. We never send your photo, your poster, your email address, your name or your address, and we send nothing at all for posters made under our parent or guardian setting. No TikTok script runs on this site: it sets no cookies and stores nothing in your browser. How TikTok handles what it receives is set out in its own privacy policy.

Where your data goes

Several of these providers are based in, or process data in, the United States. Where personal data leaves the EU/EEA, the transfer relies on safeguards such as the European Commission's standard contractual clauses in the provider's terms or the provider's certification under the EU-US Data Privacy Framework.

Cookies and browser storage

  • After you pass the human check we set one cookie (__Host-m2p_hv) that holds only a signed expiry time, no personal data, and lasts 30 minutes so you are not asked again. Your browser's local storage keeps a matching expiry (m2p_hv_until).
  • A short-lived entry in session storage stops an order from being counted twice on the confirmation page.
  • So that closing the tab does not lose a poster you already made, your browser's local storage keeps a link back to it (m2p_resume) and the email address and world you last entered in the studio (m2p_draft). Both stay on your device only, are never sent anywhere as storage, and expire after 3 days. Clearing site data or pressing Start over on that banner removes them.
  • Stripe's checkout page and Cloudflare's check may set their own cookies under their policies.
  • We set no advertising or tracking cookies of our own. Our page-visit count is cookieless and stores nothing on your device, and so is the session recording described under Sentry above: it sets no cookie and writes nothing to your browser's storage.

Legal basis and your rights

We process your data to carry out the order you place (photo, email, address, payment), on the basis of the consent you give for the poster preview, including the parent or guardian consent you give when the photo includes someone under 18, and on our legitimate interest in preventing bots, abuse and fraud, in diagnosing posters that failed or came out wrong, which is why the photo is kept for about 3 days, and in keeping the service working. You can object to the processing we base on that interest, including the 3 day storage of your photo, and we will delete it.

If you are in the EU/EEA or the UK you can ask us for access to your data, correction, deletion, restriction or portability, object to processing based on legitimate interest, and withdraw consent at any time without affecting what was done before. Use the Takedown & Deletion page or the contact details below. You can also complain to your data protection authority; ours is the Swedish Authority for Privacy Protection (IMY).

Contact

For any privacy question or a deletion request, use our Takedown & Deletion page. Full contact details are available on request.