Privacy without small print

Project contact

Meridian 2140 project. Send privacy questions, objections and requests to meridian2140@proton.me.

Optional first-party analytics

After consent, the browser sends its own server the visited page path, language, session identifier and referring page origin without credentials, path, query or fragment. The server stores only its hostname and derives the country code and device class from technical headers. The identifier is not used to track you on other websites.

The purpose of the site's own statistics and Google Analytics 4 is to improve content and navigation; their legal basis is consent. Withdrawing consent stops their further measurement, but does not invalidate earlier lawful processing or automatically erase records already received.

Retention

Cleanup removes visits and actions older than 30 days during the next relevant write or statistics read. Old rate-limit records are cleaned up intermittently as analytics operates. There is no separate timer: data may remain longer during inactivity. Aggregate editorial conclusions may remain without session identifiers.

Recipients and international processing

Recipients include hosting and security providers; data may also be disclosed when legally required. Global services may process data outside your country. The relevant provider supplies information about processing locations and safeguards; its policies are linked below.

Action measurement after consent

We also measure partner-offer clicks and opening Lightning support: action type, service, placement, page path, language and time. These records contain no session identifier or payment details.

Protection against abuse

The analytics server processes the IP address to limit abuse. It stores a derived hash in ten-minute windows with a request count; hashing does not guarantee anonymity. Visit and action records contain no full IP address, name or email. Hosting-related technical processing is separate.

Google Analytics 4

After consent, Google receives a known public page path without query parameters or fragments, language, a recognized visit source, pseudonymous identifiers and technical browser and device data. The connection exposes your IP address to Google; according to its documentation GA4 does not store it. The purpose is audience and content usage reporting. We measure page views, opening a guide or tool, and GA4 basic session and engagement events. We do not send form contents, search terms, seed phrases, wallet addresses or calculator inputs. Enhanced Measurement, Google Signals and advertising personalization are disabled.

In GA4 we set event and user data retention to 2 months without resetting it on new activity. Google deletes data in monthly cycles; this setting does not limit most aggregated standard reports. Our own statistics have the separate retention period described below.

Google receives these analytics data. Processing may also take place in the USA and other countries. Google describes its transfer mechanisms in the Legal frameworks for data transfers link; this is not a promise that data stays in the EU. See Google's policies below for details.