Privacy Policy
Last updated: 13 November 2026
Memora is operated by IT World DEV., Dubai, United Arab Emirates. This policy explains what we hold about you, what we cannot see, and the choices you have.
The short version
- Your castle, photos, chats and shared memories are encrypted on your device. We store them but cannot read them.
- We keep the minimum needed to run accounts and friendships: username, display name, email address and who your friends are.
- We do not sell data, show adverts or use tracking or analytics services.
- You can download everything or delete everything yourself, at any time.
What we can see
| Information | Why we hold it |
|---|---|
| Username and display name | So friends can find and recognise you |
| Email address | To confirm your account, reset your password and send essential account notices |
| A scrambled sign-in value made from your password | To check it is you. Your actual password never reaches us |
| Your public encryption key and your locked private keys | So you and your friends can encrypt for each other, and so you can sign in on a new device |
| Friend list, friend requests and blocks | To connect you with the people you choose |
| For each message and shared memory: who sent it, to whom, when, and its size | To deliver it and show it in order |
| Reports you send, including any messages you choose to attach | To review abuse |
| Your internet address, briefly | To limit repeated sign-in attempts and abuse. It is held in memory only and not stored with your account. Our web server may also keep standard access logs for up to 30 days |
What we cannot see
The contents of your castle (islands, rooms, books, memories, tags, dates), your photos, your chat messages and your shared memories. These are end-to-end encrypted with keys that only your devices, and for shared items your friend's devices, can unlock.
One honest limit: like every web app, Memora's code is delivered by our server each time you open it. The encryption protects your stored data, including if our database were copied, but you are trusting us to deliver honest code.
Cookies and storage on your device
We set one cookie, to keep you signed in. Your browser also stores your unlocked encryption keys so you do not have to type your password on every visit, and a cached copy of the app so it opens quickly. Signing out removes the cookie and the keys.
Services we rely on
Memora runs on a virtual server provided by Hostinger. Emails are sent through our email provider. The app loads its 3D engine from cdnjs (Cloudflare) and its fonts from Google Fonts; those companies receive your internet address when your browser fetches those files.
How long we keep things
We keep your data until you delete it or your account. Deleting your account removes everything immediately. Reports are kept for up to 12 months. Backups are overwritten within 30 days.
Your choices and rights
- See and download: use "Download my data" on the account screen.
- Correct: change your display name on the account screen. To change your email, contact us.
- Delete: use the account screen or the account deletion page.
- Object or complain: write to us. Depending on where you live, you may also have the right to complain to your data protection authority.
Children
Memora is not for anyone under 16. If we learn that an account belongs to someone younger, we will close it.
Security
Besides end-to-end encryption, connections use HTTPS, sign-in values are hashed, and sessions use secure cookies. No system is perfectly secure; keep your password and recovery code private.
Changes
If this policy changes we will update the date above and tell you in the app.
Contact
IT World DEV., Dubai, United Arab Emirates. Email: support@itworldev.cloud.