Privacy Policy

Last updated 19 September 2026.

This describes what getmemorypalace.com (“Memory Palace”, “we”) actually collects and does with it. It’s run by one person, not a company with a legal team — if anything here is unclear, ask.

What we collect

• Account info — your email, and either a password (stored as a salted hash, never in plain text) or, if you use Google sign-in, your Google account’s id and email.
• What you build — the notes, text, or PDFs you turn into a palace; the palace’s rooms, objects, and the pictures/phrases generated for them; any photos you upload for a room; how far along you are in reviewing each memory.
• Basic technical logs — standard web server logs (IP address, browser type, request time) kept for security and debugging, not for tracking. There is no analytics or advertising tracker on this site.

Who it’s shared with

• OpenRouter (an AI model routing service) — the text you turn into a palace is sent there to generate each memory’s picture or phrase. That is the only reason your study content ever leaves this server.
• Google — only if you choose “Continue with Google” to sign in, standard OAuth sign-in information is exchanged with Google.
• Cloudflare — sits in front of this site for performance and basic abuse protection, and sees the same traffic any CDN does.

Nothing here is sold, and nothing is shared with anyone else. A palace you explicitly publish (the “Publish” button on a palace you own) is, by design, visible to anyone with its link, including the text and pictures in it — that is the point of publishing it, not an accident.

How long it’s kept

For as long as your account exists. There is no automatic account-deletion feature yet — to have your account and everything in it deleted, email [email protected] from the account’s own address. It will be done by hand, promptly.

Cookies

One cookie: a signed, httpOnly session token that keeps you logged in. No advertising or cross-site tracking cookies exist on this site.

Children

This site isn’t directed at children under 13, and knowingly doesn’t collect their data.

Changes

If this changes in any way that matters, the date above will change with it.

Contact

Questions, deletion requests, anything else: Contact.