Privacy Policy

This Privacy Policy explains how Momento (“we”, “us”) collects, uses and protects information when you use our desktop application (distributed through Microsoft Store), our website at mymomento.gg, and any related services (together, the “Service”). The short version: Momento works locally on your machine. Purchase and license verification use Polar. New installations receive updates through Microsoft Store. Existing standalone installations contact our download server for updates. Gameplay is uploaded only when you explicitly share it.

1. Who we are

Momento is operated by its founder, an independent service established in Belgium. Momento is an all-in-one capture, clips and highlights toolkit for PC gamers. The Service is not affiliated with, endorsed by, or sponsored by Valve Corporation, Riot Games, Inc., or any other game publisher.

2. A commercial account, local files

You create or sign in to your Momento account in the desktop application to retrieve purchases and access rights. Supabase handles sign-in using your email address and account identifier. Creating an account does not require a purchase. This account does not provide a social profile or automatic file synchronization. Everything the app produces (clips, screenshots, recordings, notes, tags, settings, in-game event logs) is stored locally on your machine, in folders you control. Licensed installations also send the technical reports described in section 3.5. License and update requests necessarily expose your IP address to the corresponding provider; they include no gameplay.

3. Data handled by the desktop application

3.1 Direct purchase

Polar handles payment, billing information and your customer portal. Our server links your verified Supabase account identifier to the Polar customer so the application can retrieve access rights automatically, without asking you for a license key. Activation and verification send an internal license key, activation ID and random device identifier to Polar; no hardware fingerprint is collected. The desktop session, license cache and last successful verification date are stored locally with Windows user-bound encryption. Website sessions use authentication cookies. Our webhook inbox stores only event and resource identifiers, the event type and receipt/review dates for reconciliation. These identifiers are pseudonymous, not anonymous. Payment and license processing serves performance of the purchase contract; mandatory accounting retention is handled according to the applicable legal requirements.

3.2 Local game data

To tag your clips with match context (kills, score, map, agents…), the app reads the official local data endpoints that supported games expose on your own machine (for example the Riot Live Client Data API or Game State Integration for CS2 and Dota 2). This data is read locally, embedded into your local files, and is never transmitted to our servers. The app never injects code into a game process and never reads game memory.

3.3 Sharing a clip or a notebook (opt-in)

When you explicitly click “Share”, the selected clip (or notebook) is uploaded to our infrastructure and becomes reachable through an unguessable link (mymomento.gg/c/… for clips, mymomento.gg/carnet/… for notebooks). For each share we store:

• The shared content itself (video and poster image, or note content) and its display metadata (title, game, duration, match context you chose to include)
• A random per-installation identifier, used only to rate-limit uploads and to group shares from the same installation — it is not linked to your name, email or any account, and is never exposed publicly
• An aggregate view counter for the public page

Shares expire automatically: the content and its database record are deleted 30 days after upload. You also receive a private deletion link when you share, which lets you remove the content immediately at any time. We never upload capture data silently.

3.4 Optional features and updates

The following features process data locally or contact services as described below. Update checks can occur automatically.

• Text recognition and translation — in the current application version, text recognition in screenshots and translation of screenshot or notebook text run on your PC, at your request. Images and text are not sent to a remote OCR or translation service. No online fallback is used if local resources are unavailable.
• Feedback button — the message you type (and any contact detail you choose to include) is delivered to our private Discord channel so we can read and act on it.
• Game icon library. In versions that offered this feature, inserting an icon downloaded the image from an external host associated with the game. The library is hidden in the current Microsoft Store version.
• Updates — new installations and updates go through Microsoft Store. For existing standalone installations previously downloaded from mymomento.gg, Momento checks downloads.mymomento.gg for updates and may download and install a signed version at startup when capture, REC and exports have stopped. These requests contain no gameplay. Store installations do not use our direct updater.

3.5 Technische Überwachung lizenzierter Installationen

Wenn Momento mit einem lizenzierten Konto angemeldet ist, sendet die Anwendung automatisch einen technischen Status und ausstehende Vorfälle an unseren Server. Dafür gibt es derzeit keinen Einwilligungsschalter in der Anwendung. Eine zufällige Kennung der Aktivierung fasst Berichte desselben PCs zusammen; der Server ordnet sie dem angemeldeten Konto zu. Diese Daten sind pseudonym, nicht anonym.

Die Berichte enthalten Versionen von Momento, Windows und WebView, CPU- und GPU-Modelle, Treiberversionen, Arbeitsspeicher und freien Speicherplatz, Aufnahmeeinstellungen und -status sowie Nutzungs- und Fehlerzähler. Seit Beginn der Erfassung erstellte Clips werden getrennt von den aktuell auf dem PC vorhandenen Clips und Aufnahmen gezählt. Aufnahmediagnosen können Zähler empfangener, umgewandelter und an den Encoder gesendeter Bilder, erzeugte Videopakete, Auslastung technischer Warteschlangen, Ein- und Ausgabeauflösung, Encodierungsmodus, Zeit seit den letzten Bildern oder Paketen, mittlere Helligkeit einer Stichprobe, Dauer schwarzer Bilder, minimierten Fensterstatus, Neustarts und die Fehlerstufe enthalten. Vorfälle können Zeitpunkte, Fehlercodes, Vorgangskategorien, Softwaremodulnamen, Zeilennummern, technische Offsets und eine kurze Liste letzter technischer Ereignisse einschließlich des erkannten Spiels enthalten. Soweit verfügbar, werden Kontext und strukturierte Warnungen zum Zeitpunkt des Vorfalls festgehalten.

Diese Überwachung dient der Fehlerdiagnose und der Übersicht lizenzierter Installationen. Sie enthält keine Videos, Bilder, Audiodaten, Notizbuchtexte, Cliptitel, persönlichen Dateipfade, Rohprotokolle, Passwörter oder Lizenzschlüssel. Dieser Mechanismus übermittelt keine Gameplay-Inhalte und berechnet keinen Hardware-Fingerabdruck zur Identifizierung des PCs.

Nur der Dienst und unser privates Überwachungswerkzeug haben Zugriff. Die Bereinigung erfolgt schrittweise und begrenzt: Vorfälle können 30 Tage nach Eingang und Installationen 180 Tage nach ihrem letzten Bericht gelöscht werden. Beim Löschen des Kontos werden auch diese Berichte gelöscht. Anfragen legen die IP-Adresse gegenüber unseren Hostinganbietern offen; Zähler zur Missbrauchsbekämpfung verwenden eine gehashte IP-Adresse.

4. Data handled by the website

On mymomento.gg we use PostHog and Vercel Analytics to measure visits to public website pages. Neither tool loads until you accept them: a consent banner asks for your choice, which is stored in a single first-party cookie (momento_consent, kept for about 180 days). If you decline, no non-essential cookie or tracker is set. You can change your choice at any time via the “Cookies” control available on every page. Withdrawal stops further collection. Account, authentication and shared-content pages are excluded from audience measurements; URL query parameters are not sent. We never sell or rent personal data.

Previous standalone installer requests fed a separate internal technical counter: version, date, browser information, referring page without query parameters and a coarse network prefix. An IP hash limits abuse; the full IP is not stored in the download counter. Detailed download records are targeted for deletion after 30 days through bounded cleanup on subsequent requests. This counter serves our legitimate interest in operating distribution and preventing abuse; it does not contact an advertising provider.

Public share pages (mymomento.gg/c/…) are served to anyone who has the link; our infrastructure providers process standard technical request data (IP address, user agent) to deliver the page, as any website does.

5. How we use the information

• Host and serve the content you explicitly chose to share
• Rate-limit anonymous uploads and prevent abuse
• Operate, maintain and improve the website
• Measure public website visits (only with your consent)
• Read and answer the feedback you send us
• Comply with applicable legal obligations

Our legal bases under the EU General Data Protection Regulation (“GDPR”) are: performance of our contract with you (hosting the shares you create), your consent (website analytics, optional online features), our legitimate interest in running a secure Service, and our legal obligations.

6. Sharing and third parties

We share data only with the following categories of recipients:

• Infrastructure providers that host the website and the shared content (cloud compute, object storage, database, content delivery). These providers act as processors bound by contractual terms equivalent to ours.
• OCR.space — the legacy online OCR service forwards images submitted to it to this provider. The current desktop application does not use this service.
• Discord — only to deliver the feedback messages you send us.
• Audience measurement — PostHog and Vercel on public website pages, only after you consent.
• Authorities, only where required by a legally binding request.

7. Retention

• Shared clips and notebooks: deleted automatically 30 days after upload, or immediately when you use your deletion link.
• Original clips, recordings and notebook files on your machine: under your control; technical reports do not upload these files.
• Consent cookie: about 180 days, or until you change your choice.
• Website analytics: kept in aggregated or pseudonymised form per the retention settings of the tools listed above.
• Feedback messages: kept as long as needed to handle the report, then deleted.

8. Your rights

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction granting equivalent rights, you may request access to, correction of, deletion of, or a portable copy of your personal data, restrict or object to certain processing, withdraw consent at any time, and lodge a complaint with your local data protection authority (in Belgium: the APD/GBA).

Purchase and license records can be identified through your purchase email. For optional shares, we usually cannot link stored data to you as a person. The fastest way to delete a shared clip or notebook is the private deletion link you received when sharing it. If you lost it, contact us with the public link and we will remove the content. We respond within one month.

9. Security

We use industry-standard encryption in transit (TLS 1.2+) and at rest, restricted access controls, and unguessable capability tokens for shared content (a share is only reachable by someone who has the link). No method of transmission or storage is 100% secure; we will notify affected users without undue delay if a personal data breach is likely to result in a high risk to their rights and freedoms.

10. International transfers

Some of our infrastructure providers operate servers outside the European Economic Area. Where applicable, transfers are protected by the European Commission’s Standard Contractual Clauses or an equivalent safeguard.

11. Children

The Service is not directed to children under 13, or under the age of digital consent in your jurisdiction (16 in most EU member states). We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will remove it.

12. Changes

We may update this Policy. Material changes are announced on this website and within the application at least 30 days before they take effect. The effective date at the top of this page always reflects the latest version.

13. Contact

For any privacy question or request, write to momentogg@outlook.com.