Privacy policy

When you connect your Buffer account:

• Your Buffer account ID, so Media Saver can recognise you when you return.
• The access and refresh tokens Buffer issues, encrypted before they are saved. They let Media Saver create posts and check their status on your behalf.
• A list of your Buffer channels (names, IDs, networks and organisation name), cached for up to 10 minutes to reduce requests to Buffer.

When you send a post:

• The image you upload, stored under a random, unguessable name.
• The original file name, the channel it was posted to, the Buffer post ID and the scheduled time, so your dashboard can show each upload and its status.

When you create an API key:

• A one-way hash of the key, never the key itself, plus the name you gave it, its first few characters, when it was created and when it was last used.

Media Saver never sees your Buffer password, and it does not store your post text after the post is created in Buffer.

Buffer requires every image to be available at a public web address until the post goes out. While an image is hosted, anyone who has its exact address can view it. Addresses are long and random, so they cannot be guessed, but do not upload anything you would not post publicly.

• Images are deleted at the first daily cleanup after Buffer reports the post as published, or after the post is deleted in Buffer.
• Images that were uploaded but never used in a post are deleted after 7 days.
• Images for posts that failed to publish are kept so you can retry. Ask, and they will be deleted.
• Upload records (file name, status and dates) stay so your dashboard history remains accurate. The image itself is gone.
• Your account details and tokens are kept until you ask for them to be deleted.

Media Saver uses one cookie, which keeps you logged in. It is encrypted and contains no tracking information. There are no analytics, advertising or tracking cookies.

Media Saver relies on these providers to run:

• Buffer, which receives your posts and images and publishes them to your channels.
• Vercel, which hosts the app and keeps short-lived request logs.
• Neon, which hosts the database.
• Cloudflare, which stores the images (R2) and manages the domain.

Media Saver does not sell your data or share it with anyone else.

To stop Media Saver accessing your Buffer account immediately, remove it from the connected apps in your Buffer account settings. Its tokens stop working straight away.

To have your data deleted, including your account record, upload history and any remaining images, email abeluche04@gmail.com from the email address on your Buffer account.

If what Media Saver stores changes, this page will be updated and the date at the top will change.