← Back to Amber

Privacy Policy

Last updated: August 27, 2026

What we collect

When you use Amber, we collect and store:

• PayPal account information: Your PayPal Payer ID (a permanent account identifier) and account verification status. We do not collect or store your email address, name, or any other personal information from PayPal.
• Memories you store: Any text content you choose to save through the MCP tools. This is the core service. We store it so your AI can recall it later.
• Metadata: Timestamps, topic tags, and any key-value metadata you attach to memories.
• Usage data: We track subscription status and payment events for billing purposes.
• Connection activity: So we can tell a broken setup from an unused account, your account record keeps the time your AI assistant last connected, the name that assistant reports for itself (for example Anthropic/ClaudeAI), the time it last asked for the list of tools, and the time and name of the last tool it called, for example amber_store_memory. These are single “last seen” values that get overwritten, not a history or an audit log. We never record the arguments to a tool call, the text of a search query, or what a memory says. It is deleted with your account like everything else.

How we store your data

Your memories are stored in your own isolated database. No other user can access your data. Each user gets a completely separate database instance hosted on Turso (libSQL), a globally distributed SQLite-compatible database.

Your data is encrypted in transit (TLS) and at rest (server-side encryption provided by the infrastructure).

How we use your data

We use your data solely to provide the Amber service:

• Store and retrieve your memories when your AI assistant requests them.
• Generate vector embeddings from your memory text so it can be found by semantic search.
• Manage your subscription and billing through PayPal.

Your memory content is not sent to any large language model (LLM). The only AI processing is embedding generation: your text is converted into numeric search vectors by OpenAI and is never run through a generative AI model. We do not sell, share, or use your data for advertising, training AI models, or any purpose other than providing the service to you.

Third-party services

Amber uses the following third-party services to operate:

• PayPal: Payment processing and identity verification.
• OpenAI: Text embeddings for semantic search. Your memory content and search queries are sent to OpenAI's embedding API to generate the numeric vectors used for matching. This is not a generative model: it does not read, summarise, or generate text from your data. OpenAI's API data-usage policy applies. This is the only AI service that ever receives your memory text.
• Cloudflare: Hosting and content delivery.
• Turso: Database hosting.

Data retention

Your memories are stored for as long as your account is active. If you cancel your subscription, your data remains in your database but you cannot access it until you resubscribe.

If your subscription has been cancelled or expired for more than 12 months, we may delete your database. We do not send notifications before deletion.

Data deletion

You can delete individual memories at any time using the amber_delete_memory tool. Deleted memories go to trash and can be restored.

To delete all your data, use the amber_delete_account tool. This does not happen immediately: deletion is scheduled for 30 days later, and you can reverse it at any time during those 30 days with the amber_cancel_account_deletion tool. Access to your memories is suspended as soon as you schedule deletion, but you can still export your data during the 30-day window. After 30 days, your database and all associated data are permanently and irreversibly removed.

Data export

You can export all your memories at any time using the amber_export_memories tool, which returns all your data as JSON.

You can also create a backup key (amber_create_backup_key) so an automated job (a weekly cron, for example) can download the same export without an AI session. We store only a hash of that key, never the key itself, so it cannot be recovered from our database, only replaced. It can do exactly one thing: download your export. Revoke it any time with amber_revoke_backup_key.

Cookies

Amber sets one cookie, amber_src, and only when you visit this website. It records where you arrived from (a word such as google.com, reddit, or direct) so that if you later create an account we can tell which sources bring people to Amber.

What it does not contain: any identifier for you, any account or payment information, and anything readable by another website. It is first-party (set by ambermem.com, sent only back to ambermem.com), cannot be read by JavaScript, and expires after 30 days. It is not used for advertising, and it is not shared with anyone. We set it once, and a later visit does not overwrite it.

Authentication itself uses OAuth 2.1 tokens, not cookies. Using Amber through your AI assistant, rather than through this website, sets no cookie at all.

Anonymous feedback

You can send a bug report or feedback without an account, by posting to api.ambermem.com/feedback. This exists for the one case the in-app feedback tool cannot cover: your AI assistant cannot connect to Amber at all. We store the message you send, and the contact detail only if you choose to provide one.

To stop that open endpoint being abused, we limit how many messages one sender can post per hour. Doing so requires recognising a repeat sender, so we take your IP address, combine it with a secret and store only the resulting hash, a fixed-length fingerprint. The IP address itself is never written down, the hash cannot be turned back into it, and it is used for nothing except that rate limit.

Children

Amber is not intended for use by anyone under the age of 18.

Changes

We may update this privacy policy from time to time. Changes will be reflected on this page with an updated date.

Contact

For privacy-related questions, send us a message at https://api.ambermem.com/feedback, an unauthenticated POST of {"message": "..."}, no account needed. Amber deliberately operates no support inbox, because collecting email addresses is exactly what the rest of this policy says we avoid. Include a contact field if you would like a reply; it is used only to answer you.

You can exercise your data rights yourself, without contacting us at all: your AI assistant can export everything (amber_export_memories) or delete your account and all its data (amber_delete_account).