Privacy Policy

This Privacy Policy explains how Momento (“we”, “us”) collects, uses and protects information when you use our desktop application (distributed through Microsoft Store), our website at mymomento.gg, and any related services (together, the “Service”). The short version: Momento works locally on your machine. Purchase and license verification use Polar. New installations receive updates through Microsoft Store. Existing standalone installations contact our download server for updates. Gameplay is uploaded only when you explicitly share it.

1. Who we are

Momento is operated by its founder, an independent service established in Belgium. Momento is an all-in-one capture, clips and highlights toolkit for PC gamers. The Service is not affiliated with, endorsed by, or sponsored by Valve Corporation, Riot Games, Inc., or any other game publisher.

2. A commercial account, local files

You create or sign in to your Momento account in the desktop application to retrieve purchases and access rights. Supabase handles sign-in using your email address and account identifier. Creating an account does not require a purchase. This account does not provide a social profile or automatic file synchronization. Everything the app produces (clips, screenshots, recordings, notes, tags, settings, in-game event logs) is stored locally on your machine, in folders you control. Licensed installations also send the technical reports described in section 3.5. License and update requests necessarily expose your IP address to the corresponding provider; they include no gameplay.

3. Data handled by the desktop application

3.1 Direct purchase

Polar handles payment, billing information and your customer portal. Our server links your verified Supabase account identifier to the Polar customer so the application can retrieve access rights automatically, without asking you for a license key. Activation and verification send an internal license key, activation ID and random device identifier to Polar; no hardware fingerprint is collected. The desktop session, license cache and last successful verification date are stored locally with Windows user-bound encryption. Website sessions use authentication cookies. Our webhook inbox stores only event and resource identifiers, the event type and receipt/review dates for reconciliation. These identifiers are pseudonymous, not anonymous. Payment and license processing serves performance of the purchase contract; mandatory accounting retention is handled according to the applicable legal requirements.

3.2 Local game data

To tag your clips with match context (kills, score, map, agents…), the app reads the official local data endpoints that supported games expose on your own machine (for example the Riot Live Client Data API or Game State Integration for CS2 and Dota 2). This data is read locally, embedded into your local files, and is never transmitted to our servers. The app never injects code into a game process and never reads game memory.

3.3 Sharing a clip or a notebook (opt-in)

When you explicitly click “Share”, the selected clip (or notebook) is uploaded to our infrastructure and becomes reachable through an unguessable link (mymomento.gg/c/… for clips, mymomento.gg/carnet/… for notebooks). For each share we store:

• The shared content itself (video and poster image, or note content) and its display metadata (title, game, duration, match context you chose to include)
• A random per-installation identifier, used only to rate-limit uploads and to group shares from the same installation — it is not linked to your name, email or any account, and is never exposed publicly
• An aggregate view counter for the public page

Shares expire automatically: the content and its database record are deleted 30 days after upload. You also receive a private deletion link when you share, which lets you remove the content immediately at any time. We never upload capture data silently.

3.4 Optional features and updates

The following features process data locally or contact services as described below. Update checks can occur automatically.

• Text recognition and translation — in the current application version, text recognition in screenshots and translation of screenshot or notebook text run on your PC, at your request. Images and text are not sent to a remote OCR or translation service. No online fallback is used if local resources are unavailable.
• Feedback button — the message you type (and any contact detail you choose to include) is delivered to our private Discord channel so we can read and act on it.
• Game icon library. In versions that offered this feature, inserting an icon downloaded the image from an external host associated with the game. The library is hidden in the current Microsoft Store version.
• Updates — new installations and updates go through Microsoft Store. For existing standalone installations previously downloaded from mymomento.gg, Momento checks downloads.mymomento.gg for updates and may download and install a signed version at startup when capture, REC and exports have stopped. These requests contain no gameplay. Store installations do not use our direct updater.

3.5 Technical monitoring of licensed installations

While Momento is signed in to a licensed account, the application automatically sends a technical snapshot and pending incidents to our server. There is currently no in-app consent switch for this behavior. A random identifier specific to the activation groups reports from the same PC; the server associates them with the signed-in account. This data is pseudonymous, not anonymous.

Reports contain the Momento, Windows and WebView versions, CPU and GPU models, driver versions, memory and available disk space, capture settings and state, and usage and error counters. Counts of clips created since monitoring began are distinct from the number of clips and recordings currently present on the PC. Capture diagnostics may include counts of frames received, converted and submitted to the encoder, video packets produced, technical queue load, input and output dimensions, encoding mode, time since the latest frames or packets, average sample brightness, black-image duration, whether the target window is minimized, restarts and the failure stage. Incidents may include timestamps, error codes, operation categories, software module names, line numbers, technical offsets and a short list of recent technical events, including the recognized game. When available, context and structured warnings are preserved as they were at the time of the incident.

This monitoring helps diagnose crashes and track licensed installations. It contains no video, images, audio, notebook text, clip titles, personal file paths, raw logs, passwords or license keys. This mechanism sends no gameplay content and computes no hardware fingerprint to identify the PC.

Reports are accessible only to the service and our private monitoring tool. Cleanup is incremental and bounded: incidents become eligible for deletion 30 days after receipt, and installations 180 days after their last report. Deleting the account also deletes these reports. Requests expose the IP address to our hosting providers; abuse-prevention counters use a hashed version of the IP.

4. Data handled by the website

On mymomento.gg we use PostHog and Vercel Analytics to measure visits to public website pages. Neither tool loads until you accept them: a consent banner asks for your choice, which is stored in a single first-party cookie (momento_consent, kept for about 180 days). If you decline, no non-essential cookie or tracker is set. You can change your choice at any time via the “Cookies” control available on every page. Withdrawal stops further collection. Account, authentication and shared-content pages are excluded from audience measurements; URL query parameters are not sent. We never sell or rent personal data.

Previous standalone installer requests fed a separate internal technical counter: version, date, browser information, referring page without query parameters and a coarse network prefix. An IP hash limits abuse; the full IP is not stored in the download counter. Detailed download records are targeted for deletion after 30 days through bounded cleanup on subsequent requests. This counter serves our legitimate interest in operating distribution and preventing abuse; it does not contact an advertising provider.

Public share pages (mymomento.gg/c/…) are served to anyone who has the link; our infrastructure providers process standard technical request data (IP address, user agent) to deliver the page, as any website does.

5. How we use the information

• Host and serve the content you explicitly chose to share
• Rate-limit anonymous uploads and prevent abuse
• Operate, maintain and improve the website
• Measure public website visits (only with your consent)
• Read and answer the feedback you send us
• Comply with applicable legal obligations

Our legal bases under the EU General Data Protection Regulation (“GDPR”) are: performance of our contract with you (hosting the shares you create), your consent (website analytics, optional online features), our legitimate interest in running a secure Service, and our legal obligations.

6. Sharing and third parties

We share data only with the following categories of recipients:

• Infrastructure providers that host the website and the shared content (cloud compute, object storage, database, content delivery). These providers act as processors bound by contractual terms equivalent to ours.
• OCR.space — the legacy online OCR service forwards images submitted to it to this provider. The current desktop application does not use this service.
• Discord — only to deliver the feedback messages you send us.
• Audience measurement — PostHog and Vercel on public website pages, only after you consent.
• Authorities, only where required by a legally binding request.

7. Retention

• Shared clips and notebooks: deleted automatically 30 days after upload, or immediately when you use your deletion link.
• Original clips, recordings and notebook files on your machine: under your control; technical reports do not upload these files.
• Consent cookie: about 180 days, or until you change your choice.
• Website analytics: kept in aggregated or pseudonymised form per the retention settings of the tools listed above.
• Feedback messages: kept as long as needed to handle the report, then deleted.

8. Your rights

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction granting equivalent rights, you may request access to, correction of, deletion of, or a portable copy of your personal data, restrict or object to certain processing, withdraw consent at any time, and lodge a complaint with your local data protection authority (in Belgium: the APD/GBA).

Purchase and license records can be identified through your purchase email. For optional shares, we usually cannot link stored data to you as a person. The fastest way to delete a shared clip or notebook is the private deletion link you received when sharing it. If you lost it, contact us with the public link and we will remove the content. We respond within one month.

9. Security

We use industry-standard encryption in transit (TLS 1.2+) and at rest, restricted access controls, and unguessable capability tokens for shared content (a share is only reachable by someone who has the link). No method of transmission or storage is 100% secure; we will notify affected users without undue delay if a personal data breach is likely to result in a high risk to their rights and freedoms.

10. International transfers

Some of our infrastructure providers operate servers outside the European Economic Area. Where applicable, transfers are protected by the European Commission’s Standard Contractual Clauses or an equivalent safeguard.

11. Children

The Service is not directed to children under 13, or under the age of digital consent in your jurisdiction (16 in most EU member states). We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will remove it.

12. Changes

We may update this Policy. Material changes are announced on this website and within the application at least 30 days before they take effect. The effective date at the top of this page always reflects the latest version.

13. Contact

For any privacy question or request, write to momentogg@outlook.com.