Skip to content
StudioMemes

Privacy Policy

Last updated: 2026-08-26

QuickQuoteMaker respects your privacy. This policy sets out exactly what we collect, why we collect it, who it is shared with and how to exercise your rights. It covers the QuickQuoteMaker website and its API.

Data we collect

Much of the site works without an account. The list below is what the service actually stores.

1. Account and authentication

  • Email address, display name and, where provided, a profile picture.
  • Your password, stored only as a cryptographic hash — never in plain text.
  • Sign-up method (email, Google, Discord or Apple) and the provider account id when you use a social login.
  • Email verification status.
  • Country and city estimated from your IP address at sign-up, used for audience statistics only.
  • Active sessions: session id, IP address, browser user agent and expiry date.

2. Content you create

  • Saved quotes, designs, layouts, templates and collections.
  • Images and videos you upload as backgrounds or avatars.
  • Creations submitted to the public gallery and quotes you suggest.
  • Forum threads and replies, and testimonials you send.
  • Favourites (quotes, images, fonts, templates, creations).

3. Usage and analytics

  • Page views, device and country via Google Analytics.
  • Downloads: format, dimensions, date, plus country and city derived from your IP.
  • Searches you run on the site (text truncated to 200 characters).
  • Quote votes, de-duplicated using your IP address.

4. Technical data

  • IP address, used to rate-limit abuse (brute-force and bot protection) and to keep the service secure.
  • API keys you generate, stored as a hash.

5. Contact form

  • Name, email address and message, sent to us by email so we can reply.
  • IP address shared with Google reCAPTCHA to tell humans from bots.

Why we use this data

  • To run the service: your account, saved work and exports.
  • Security: preventing fraud, abuse and automated attacks.
  • Product improvement: understanding which features are actually used.
  • Communication: verification and password-reset emails, and replies to your messages.
  • Funding: serving advertising.

The legal bases are performance of a contract (providing the service), legitimate interest (security and improvement) and consent (analytics and advertising).

Cookies

  • Essential: session cookie, language preference (qqm-locale) and light/dark theme. The site cannot work without them.
  • Analytics: Google Analytics, for aggregate statistics.
  • Advertising: Google AdSense. You can manage your preferences from Google's Ads Settings page.

Who receives your data

We do not sell your data. It is processed by:

  • Vercel — website hosting and technical logs.
  • Supabase — database and file storage.
  • Google Analytics and Google AdSense — analytics and advertising.
  • Google reCAPTCHA — contact form protection.
  • Upstash — rate-limiting counters keyed to your IP address.
  • Our email provider — transactional messages.
  • Pexels, Unsplash and Pixabay — your image searches are sent to them to return results.
  • YouTube — only if you load a video in the video editor, using its no-tracking-cookie mode.

Some of these providers may process data outside the European Union under appropriate contractual safeguards.

How long we keep it

  • Login sessions: 8 hours, then they expire automatically.
  • Account and content: until you delete your account.
  • Usage and download statistics: retained in aggregate form.
  • Contact messages: for as long as needed to handle your request.

Security

The site is served over HTTPS only. Passwords and API keys are never stored in plain text, access to data is enforced server-side, and rate limits protect sensitive endpoints.

Children

The service is not aimed at people under 16 and we do not knowingly collect their data.

Your rights

You have the right to access, correct, erase, restrict, object to and port your data. You can delete your account and its data yourself from your profile page.

For anything else, use our contact form. You may also lodge a complaint with your local data protection authority.

Changes

This policy may change. The date it was last updated is shown at the top of this page.