Privacy Policy

Last updated: 13 July 2026

This Privacy Policy explains what information MumenLabs ("MumenLabs", "we", "us", or "our") collects when you use mumenlabs.com and our tools (the "Service"), why we collect it, and what choices you have. MumenLabs is operated from the United Arab Emirates.

The short version: we collect what we need to run your account, take payment, and show basic analytics — and nothing more. We do not sell your personal data, and we do not run cross-site advertising or ad targeting. If you have any questions, email us at support@mumenlabs.com.

1. What we collect and why

Account information. When you register, we collect your email address and a securely hashed password (managed by our authentication system, Better Auth). We use these to create and secure your account, sign you in, and send essential account emails such as address verification and password resets.

Payment records. When you buy credits, payment is processed by PayPal. We receive a record of the transaction — such as an order reference, amount, and status — so we can add credits to your wallet and keep an accounting ledger. We do not receive or store your full card or bank details; PayPal handles those.

QR-scan logs. When someone scans one of your QR codes or follows one of your short links, we log details of the scan so you, as the code's owner, can see how it performs. This includes the visitor's IP address, user-agent (browser, operating system, and device type), the referrer, and an approximate location (such as country and city) derived from the IP address using an offline lookup. This data is tied to the QR code, not to a named person, and we use it to produce scan statistics for the owner and to protect the Service from abuse.

Content you create. When you use a tool to build something — a link-in-bio page, a wedding or birthday invitation, an uploaded file served behind a QR code, or a link a QR code points to — we store that content so we can host and serve it for you. Anything you publish behind a public link or QR code is, by design, accessible to anyone who has the link.

Analytics (Google Analytics). We use Google Analytics (GA4), provided by Google, to understand how visitors find and use our website — for example, which pages are viewed, approximate location, and device and browser type. Google Analytics sets its own cookies and processes data such as your IP address and online identifiers as a third-party provider. We use it only to measure and improve the Service, never for advertising. You can opt out at any time with Google's opt-out browser add-on.

Operational logs. Like any online service, our servers keep short-lived technical logs (such as request metadata and errors) so we can operate, debug, and secure the Service.

2. Cookies

We keep cookies to a minimum. We use:

A necessary session cookie, set by our authentication system (Better Auth), to keep you signed in and protect your session. The Service cannot keep you logged in without it.
Google Analytics cookies (for example _ga and _ga_*), set by Google to measure how the site is used. These are analytics cookies, not strictly necessary — blocking them does not stop you using the Service, and you can opt out with Google's opt-out browser add-on.

We do not use advertising or cross-site ad-targeting cookies.

3. Third parties

We share personal data only with the providers we need to run the Service, and only for that purpose:

PayPal — processes payments. Your payment is also subject to PayPal's own privacy policy.
Google (Google Analytics) — measures website usage, subject to Google's privacy policy. You can disable it with the opt-out browser add-on.
Cloud hosting and infrastructure — our servers, database, and file storage run on managed cloud servers we operate. Our hosting providers house this infrastructure on our behalf and process data only under our instructions.
Email delivery — we send account emails through an email delivery provider, which processes the recipient address and message needed to deliver them.

We may also disclose information if we are required to by law, or where we believe in good faith that it is necessary to protect the rights, safety, and security of the Service, our users, or the public. We do not sell your personal data, and we do not share it for cross-context behavioral advertising.

4. How long we keep it

Account information — for as long as your account is active.
Payment and ledger records — for as long as needed for accounting, tax, and legal obligations, even after you close your account.
QR-scan logs and operational logs — for up to 24 months, after which they are deleted or anonymized.
Content you create and uploaded files — until you delete them or close your account; backup copies may persist for a limited period afterward.

5. Your rights

You can access, correct, export, or delete your personal data. You can update your details from your account settings, and you can delete your account at any time — doing so removes your account information and the content tied to it, subject to records we must keep by law and short-lived backups.

Depending on where you live, you may also have the right to object to or restrict certain processing, to withdraw consent, and to complain to your local data protection authority. To exercise any of these rights, email support@mumenlabs.com and we will respond within the time your law requires.

6. International processing

We are based in the United Arab Emirates, and the providers we rely on may process and store data in other countries. Wherever your data is handled, this policy applies and we take reasonable steps to keep it protected.

7. Children

The Service is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has given us personal data, email support@mumenlabs.com and we will delete it.

8. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, give additional notice.

9. Contact

Questions or requests about your privacy? Email us at support@mumenlabs.com.