The MemeStack browser extension sends to api.memestack.ai only the images you
explicitly choose to save, together with your login token — and, if you switch on
the optional default hint in its settings, the text you typed there.

The web address an image came from is kept on your device to label the save in the
extension's own list, and is never transmitted. The extension does not collect,
store, or transmit your browsing history, and it contains no analytics or tracking
of any kind.

The extension asks for access to all sites because you can save an image from any
site. A small script runs on pages you visit purely so a right-click knows which
image you meant; it reads the page only when you choose "Save to MemeStack", and
reports nothing otherwise.

One request goes somewhere other than us, and it exists to protect you. Before
downloading an image, the extension asks Cloudflare's public DNS resolver (1.1.1.1)
where that image's domain points, so it can refuse anything resolving to a device on
your own network. Without that check, a hostile page could point an "image" at your
private network and have the extension upload whatever came back. Only the domain
name is sent, and only for an image you chose to save — never the page you were on,
never the image, never anything identifying you.

The token the extension holds is deliberately restricted: it can upload images and
read the status of your own saves, and our servers refuse it on everything else,
your wallet included. Logging out of the extension discards it.

Full policy: https://memestack.ai/privacy