Privacy Policy

MediaGrab does not utilize external user databases, user accounts, authentication profiles, or cloud synchronization mechanisms.

Any configuration preferences (such as dark mode selection or download history) are stored entirely in your local web browser using browser-native APIs (such as localStorage). You can inspect, clear, or purge this information at any time directly through your browser settings.

When you submit a URL for analysis or download, the request is processed securely through our server purely as a transient protocol bridge.

Media files are streamed directly to your browser without persistent archival. Temporary files generated for stream merging (such as multiplexing video and audio streams via FFmpeg) are immediately destroyed upon transfer completion or request termination. We never catalog, archive, or retain requested media.

MediaGrab does not run first-party tracker beacons or behavioral analytics. However, to keep this service free and cover server maintenance costs, we partner with third-party vendors such as Google AdSense.

• Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites.
• Google's use of advertising cookies enables it and its partners to serve personalized or non-personalized ads to users based on their visit to our site and/or other sites on the Internet.
• Users may opt out of personalized advertising by visiting Google My Ad Center or the Digital Advertising Alliance WebChoices tool.

Under global data protection regulations—including the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA/CPRA):

• Right to Know & Access: Because we collect zero personally identifiable information (no accounts, no emails, no names, no database records), we hold no personal data profile on you.
• Right to Deletion: You can completely erase all local trace data at any time by clearing your browser cache and local storage.
• Non-Discrimination: We provide equal service and access to all users regardless of their privacy choices or opt-outs.

To defend against malicious botnets, distributed denial-of-service (DDoS) attacks, automated bulk scrapers, and vulnerability scans, our edge infrastructure evaluates transient connection metrics (such as client IP and request rates). These rate-limiting records are stored purely in volatile memory sliding windows and are automatically purged.