This policy covers the Green Screen Memes API: the dashboard, your account and key, billing, and the requests you make to the REST API and the MCP server. It's run by Hedko Group LLC ("we"). The Green Screen Memes app has its own policy.
Last updated November 3, 2026
The short version
We keep what we need to run your account, count your usage and bill you: your email, name, company, plan and request logs.
We never see your card. Stripe handles payments.
No ads, no tracking scripts, and we don't sell data.
You can delete your account from the dashboard, or email us to get a copy of your data.
1What we collect
Your account
When you sign in with Google or an email link: your email address, your name (if your Google account has one), and how you signed in.
What you add in the dashboard: your name and company.
When you created the account and last signed in.
Your key
We store a one-way hash of your API key, never the key itself, plus its short ID, plan and limits. That's why we can only show a key once.
Connected apps
When you connect an app such as Claude or ChatGPT by signing in, we store the app's name and website as the app gives them, where its access is sent, when you connected it, and one-way hashes of the codes and tokens it was given, never the tokens themselves. Its requests are recorded like any other request on your key. The app gets no access to your email, billing or key.
Billing
Stripe collects your card, billing address and tax ID during checkout. We receive your Stripe customer and subscription IDs and your plan's status (active, cancelled, payment failed) and renewal date. We never see or store card numbers.
API requests
Each request: the key, the route (for example GET /v1/memes), the response status, its size and the time. We use this to count usage against your plan, show your stats, and find problems.
Searches: we count search terms across all customers (how often each term is searched, and whether it found anything) to improve the catalog. These counts aren't tied to your key or account.
Downloads: to protect the library from scraping, our media servers record each file request with a one-way hash of the IP address (not the address itself), the country, and the app or browser it came from.
What you send us. The API only needs search terms and clip IDs. Don't put personal information about your own users in search queries; if your app passes user text through, you're responsible for telling your users.
Emails
We send emails about your account only: a welcome email, warnings at 80% and 100% of your monthly limit, plan changes and payment problems. We keep a short log of what we sent (address, type, time). We don't send marketing emails unless you've asked for them.
2Cookies
The dashboard sets one cookie, gsm_api_session, to keep you signed in for up to 30 days. Connecting an app also sets a cookie for 10 minutes (__Host-oauth-consent-…) that ties the consent page to your browser. Signing in with Google uses Google's sign-in page and Firebase, which store your sign-in in your browser. There are no analytics or advertising cookies, and we don't set any cookies on the public pages.
3Who helps us
We share data only with the services that run the API, and only what each one needs:
Cloudflare hosts the API, stores accounts and usage counts, and protects the service from attacks. Like any web host, it handles IP addresses.
Google Firebase Authentication handles sign-in. It's the same sign-in system the Green Screen Memes app uses.
Stripe handles payments, invoices and tax.
Resend delivers our emails.
We'll also share information if the law requires it, to protect our rights or users' safety, or with a buyer if the business is sold, under this policy.
4How long we keep it
Your account and key: until you delete your account.
Connected apps: until you disconnect the app, it goes 30 days without using its access, you roll your key, or you delete your account.
Request logs: about three months. Monthly and daily usage totals stay with your key so your stats and billing history add up.
Billing records: Stripe keeps invoices and payments for as long as tax and accounting laws require, even after you delete your account.
Email log: the most recent 200 emails across all customers.
5Your choices
See and change it: the dashboard shows your profile, key and usage, and you can edit your name and company in Profile.
Disconnect an app: Profile → Connected apps → Disconnect. It loses access at once.
Delete it: Profile → Delete account removes your account and turns off your key. Cancel a paid plan first. Your sign-in stays in Firebase so you can keep using the Green Screen Memes app with it; email us if you want that removed too.
Get a copy, or anything else: email info@greenscreenmemes.app. We reply within 30 days, and sooner where the law says so.
Depending on where you live (for example California or the EU and UK), the law may give you more rights, such as objecting to how we use your data or complaining to a regulator. We honor those rights for everyone, wherever you are.
6Security, location and changes
Everything travels over HTTPS. Keys are stored only as hashes, and sign-in sessions are signed so they can't be forged.
We're based in the United States, and our providers process data in the US and other countries. Where the law requires it, they use standard contractual safeguards.
The API is a service for businesses and developers, not for children under 16.
If we change this policy in a way that matters, we'll email account holders at least 30 days before it takes effect.