Legal
Privacy Policy
Last updated: October 29, 2026 · Operator: SameButMe, Hong Kong · Contact: support@samebutme.com
Summary
SameButMe turns one or two of your photos into a short meme video. This policy says what we collect, which companies handle it for us, how long it stays and how to delete it. We do not sell your personal data.
The short version for photos: we never save them. They pass through our server to our AI provider and are not written to our database, to our file storage or to your library. The finished video is saved, and so are the pictures of your AI characters, in private storage that only you can open; the details are below.
What we collect
Account: your email address, your name and how you sign in, with a password (kept only as a hash) or with Google. With Google we also receive your Google profile picture. Each sign-in session stores the IP address and browser type it came from, to keep the account secure.
Orders and credits: a Stripe customer id, every credit added, spent, refunded or taken back on your account and, for a monthly plan, its status, its renewal date and the card brand and last four digits Stripe reports. We never see your full card number.
Renders: for each video, a record with the meme and template you picked, the quality, the number of people, its status and times, the credits it cost and our AI provider's task ids and file links. The record holds links, not your photos (see Your photos).
Invites: if you use or share an invite code, we keep the code, who invited whom and one-way hashes (keyed, so they can't be turned back) of the browser, IP address, card and email address used to spot people inviting themselves. We keep the hashes, never the values.
Messages: what you write to us at support@samebutme.com.
Usage: the pages you view, the site that sent you, your device type and your approximate country, collected by Google Analytics and Vercel Web Analytics (see Cookies).
Your photos and character cards
You add one or two photos (JPEG, PNG or WebP, up to 10 MB each) on a meme's page. Until you press the button that makes the video, they stay in your browser. As soon as you add them, your browser keeps small copies of the photos and your settings in its local storage on your device, so a reload, a sign-up or a checkout does not lose them and they are still there when you come back, also in a new tab (the link in a confirmation email can open one). The copies do not leave your device until you press the button. They are deleted when the video starts, when you sign out and when you delete your account, and they are not used once an hour has passed since they were last saved. The photos of your last render stay in this tab's session storage for Make another; they are gone when you close the tab or sign out.
When you press the button, your browser sends the photos to our server. We do not save them: they are not written to our database, to our file storage or to your library. The server holds them in memory while the render is set up and uploads them to Kie.ai, our AI provider, into its temporary file storage. Kie says it deletes those uploads after 24 hours.
If Kie is busy, a render can wait a few minutes before it is sent. While it waits, its record holds the link to your uploaded photo, not the photo itself, so it can be sent later. We delete that link as soon as the request goes through or the render ends, and in any case when the render reaches its 30-minute limit. If Kie keeps refusing the upload, the render does not start, your credits go back and the photo is dropped.
Character cards: for each photo, Kie's image model makes a character card, a head-and-shoulders and a full-body picture of that person, and the video model uses it to put you in the clip. Kie makes and holds the card. We do not copy it into our storage and it is not shown in your library; its link stays in the render's record for as long as the record exists, and our team can open that record when it looks into a problem with your render.
Your videos
When a render finishes, we copy the MP4 from Kie into our file storage (Vercel Blob) and list it in My videos. Only your account can open My videos, a video's page and its download button; each checks that you are signed in and that the video is yours.
The file itself sits at a long random web address that is not password-protected: anyone who has that exact address can play it, so share it only on purpose. We do not publish your videos, list them or link to them anywhere. The Share button hands the file to your device's share sheet, or the site's own address; it never gives out the file's address. Copies in another shape or without sound are made when you ask for them and are not stored.
A video stays in your account until you delete it or your account; it has no expiry. To delete one, use the delete button on its tile in My videos or Delete video on its page, and confirm. That removes its record, with the character-card links in it, and deletes its file from our storage. Renders that failed can be deleted the same way. If our storage can't be reached, nothing is deleted and the video stays in My videos, so you can try again. Deleting a video doesn't give credits back.
Kie also keeps its own copy of a finished video for a limited time under its own rules.
Your AI characters
AI characters (Characters in the app) are made of the choices you pick, a short note about clothes or mood (up to 500 characters) and, if you want, a face photo. Each image is a character sheet: a close-up portrait and a full-body picture. Kie's image model makes it from your picks, your note and, for the Natural type, a style picture of ours. We keep your picks, your note and the name of each character so the character's page can show them and a new outfit can build on them.
When a sheet is ready, we copy it, with a smaller preview, into a private file store (a separate Vercel Blob store that is not public). The sheet has no public web address: the only way to see it is the page of our site that serves it, which checks that you are signed in and that the sheet is yours, and refuses everyone else. We do not publish your characters, list them or link to them anywhere. Kie also keeps its own copy of the images it makes for a limited time under its own rules.
A face photo is optional (JPEG, PNG or WebP, up to 10 MB). Your browser sends it to our server only when you press the button that makes the character, together with a box you tick to say it is your own face or the face of an adult who agreed. We do not save it: it is not written to our database or to our file storage, and we only record that a face photo was used. The server holds it in memory while the request is set up and uploads it to Kie's temporary file storage, which Kie says it deletes after 24 hours. If Kie is busy, the request can wait a few minutes; while it waits, its record holds the link to your uploaded photo, not the photo itself, and we delete that link as soon as the request goes through or the image ends.
When you cast a character in a meme video, or ask for a new outfit, our server reads that character's sheet from the private store and uploads it to Kie's temporary file storage for the image or video model, the same way a photo's character card is handled. The sheet we keep stays private to you.
Deleting a character, or one of its outfits, deletes its pictures from the private store and removes its records, and deleting your account does the same for all your characters. A character that is still being made can't be deleted. If the private store can't be reached at that moment, the character is deleted anyway and its pictures are deleted later: we keep trying automatically until they are gone, and nothing on the site shows them in the meantime. Deleting doesn't give credits back, and a video you already made with a character stays in My videos.
Who handles your data
Kie.ai (AI video and image generation) receives your photos through its temporary file storage and the instructions we write for the AI, makes the character cards and the video, and keeps its own copies for a limited time. For AI characters it also receives your picks and note, an optional face photo and a character's sheet, and makes the sheets. It does not receive your name, email address or account.
Vercel (hosting, file storage, analytics) runs the site, so it handles every request, including your IP address and the pages you open. Vercel Blob stores the finished videos, and a second, private Blob store keeps your AI characters' pictures. Vercel Web Analytics counts visits without cookies.
Neon (database) stores your account, sign-in sessions, credit history, render records, your AI characters' records (names, picks and notes), invite records and the other records described above.
Stripe, with Link (payments): we sell through Link, operated by Stripe as the merchant of record, so you pay on a Stripe checkout page. We send Stripe your email address and name when your account is created. Stripe handles your payment details, billing address, tax details, receipts and refunds, and tells us what you bought and whether it was refunded or disputed.
Resend (email) receives your email address and the text of each message we send: sign-in and verification links, password resets, the welcome email, notices that a video is ready or could not be made, and purchase confirmations. All of them are service messages about your account.
Google (sign-in and analytics): if you sign in with Google, Google sends us your name, email address and profile picture and sees that you signed in to SameButMe. We load Google's sign-in script only on the sign-in and sign-up pages and, while you are signed out, next to a meme's upload form; Google then sees your visit and may set its own cookies. Google Analytics 4 runs only on samebutme.com itself (see Cookies).
Forward Email (support mail): mail you send to support@samebutme.com is forwarded to our inbox by this email-forwarding service.
Our team can open a private back office to answer support questions and stop abuse. It shows account emails, credit history and renders with their records. It cannot show your photos, because we do not keep them.
These providers process data for us and may do so outside your country under appropriate safeguards. We do not sell your personal data or share it for advertising.
How long we keep it
Photos: we do not keep them. A waiting render holds a link to your uploaded photo for about 30 minutes at most, and Kie deletes its upload after 24 hours.
Videos, render records and character-card links: until you delete that video or your account.
AI characters (their pictures, names, picks and notes): until you delete that character or your account. Face photos: we do not keep them, and Kie deletes its upload after 24 hours.
Account, credit history and the invites you sent: until you delete your account. A sign-in lasts up to 7 days and is renewed while you use the site.
Records that stay after you delete your account are listed under Deleting your account.
Deleting your account and getting your data
To delete your account, open the account menu, then Settings, then Delete account. You confirm by opening the link we email you (if you have a password, you enter it first); the link works for 24 hours. Deleting cancels any active subscription at Stripe first, then removes your account, sign-in sessions, render records, AI character records, credit history and the invites you sent from our database, and then deletes the files of your videos from our storage and the pictures of your AI characters from the private store. A render still running when you delete the account is not saved. Unused credits are lost.
What stays after that: Stripe's own records of your payments, including its customer record, under Stripe's policies; our back-office log of credit adjustments, suspensions and refund take-backs, which holds account ids, amounts and the reason; if you were invited, the invite record with its one-way hashes but no link to you, so that a refund can still reverse your inviter's reward; and, only if our storage could not be reached at that moment, the files it could not delete, until they are gone: we keep a list of them, without your account details, and keep trying to delete them automatically until it works.
There is no export button. Email support@samebutme.com from your account email and we will send you a copy of the account, credit and render data we hold, within 30 days. You can download each finished video yourself from My videos.
Your rights
You can access, correct or delete your data, and object to processing. You can change your name and email address in Settings. For anything else, email support@samebutme.com and we will respond within 30 days.
SameButMe is for people who are 18 or older, or of age where they live. Photos of minors are not accepted (see the Terms).
Cookies and browser storage
Sign-in: one cookie, __Secure-better-auth.session_token, keeps you signed in for up to 7 days. It is needed to run the service.
Invites: opening an invite link (an address with ?ref=) stores the invite code in a cookie named memetwin_ref for 30 days, so the friend who invited you is credited; the first link you open wins. A second cookie, memetwin_dev, holds a random id for your browser and keyed hashes of the last few accounts that signed in on it. It is set when you open an invite link or sign in, lasts up to 400 days and is used only to stop people inviting themselves.
To keep invite rewards fair, at signup and at the first purchase we compare your email address and the card used with the inviter's and with their other invites, and your IP address with the inviter's. The invite keeps keyed hashes of the address, card, browser and IP, never the values themselves. The IP address of each sign-in is kept with your session for security.
Our team: the accounts that run the site get one more cookie that lets the site show the back office. Visitors never get it.
Analytics: we use Google Analytics 4, which sets first-party cookies (_ga and a second one starting _ga_) to count visits and to see which pages lead to sign-ups and purchases. It loads only on samebutme.com. It receives page views, your device type and approximate location, and events such as signing up, signing in, starting checkout, choosing a photo (the start of an upload), having your photos ready, starting, finishing or failing a render, downloading and sharing, each with the meme, quality or pack involved, and making a character or an outfit and using a character in a render (the type, how many and whether a face photo was added, never a name, a note or a photo). For a purchase it also receives the Stripe checkout id and the amount. It never receives your photos, email address, name or account id. You can opt out with Google's browser add-on: https://tools.google.com/dlpage/gaoptout
Vercel Web Analytics uses no cookies and only counts visits in aggregate. Google's sign-in script may set its own cookies. When you pay, Stripe's checkout page sets its own cookies for fraud prevention, governed by Stripe's cookie policy.
Browser storage, which stays in your browser: your light or dark choice (local storage), a short list of render and checkout ids so analytics events are not sent twice (local storage), your upload draft, with the settings, the photos and the characters you picked for it (local storage, for an hour after it was last saved, see Your photos and character cards), and your picks on the character builder — the type, traits, outfit note and how many, never a photo — so they are still there after you sign up, also in a new tab (local storage, for seven days after it was last saved). Both drafts are deleted when the video or the characters are started, when you sign out and when you delete your account. One that has outlived its time is not used and is deleted the next time the site reads it. If your browser's local storage is full or blocked, they stay in this tab's session storage instead, which is gone when you close the tab. The drafts stay on your device; the photos in them are sent only when you press the button that makes the video.
We use no advertising or cross-site tracking cookies. You can delete or block cookies in your browser; blocking the sign-in cookie means you can't stay signed in.