Privacy notice
Last updated 15 October 2026
Draft: the contact email below still needs filling in.
This notice explains what personal data the MeshRep website, tester portal and license server collect, why, how long we keep it, and your rights under data protection laws such as the GDPR.
Who we are
MeshRep is the controller of your personal data. Contact us about privacy at [contact email].
What we collect and how long we keep it
| What | Details | Kept for |
|---|---|---|
| Account | Email address, password (stored only as a secure hash), when you confirmed your email, sign-in times. | Until you or we delete the account. |
| Access | Whether your account is approved, your access start and end dates, any invite code you used. | Until the account is deleted. |
| Teams | Team name, members and their roles, invites you send (the invitee's email address). | Until the team is deleted or you leave it; invites until canceled or the team is deleted. |
| Feedback and requests | Bug reports, feedback text, feature requests, votes, and files you attach (meshes and screenshots). | Until you or we delete them or the account. |
| Licenses | Your license, the name of each computer you activate, a one-way fingerprint of that computer (not its serial numbers), and when it borrowed, renewed or returned a license. | Computers until removed; borrow records 90 days after they end. |
| License IP addresses | The IP address MeshRep activated from, the IP address you approved the activation from, and the IP address of each renewal and return. | 365 days, then deleted automatically. |
| Downloads | Which MeshRep version you downloaded, when, and the IP address you downloaded it from. | 365 days, then deleted automatically. |
| Security logs | Activation codes with the IP address they were started from, invite-code attempts, and a log of actions our administrators take. | Codes and attempts 1 day; admin log while the service runs. |
We don't use advertising or analytics trackers. The only cookies are the ones the site needs to work, such as the one that keeps you signed in. Our cookie policy lists each one.
Why we use it
- To provide the service you signed up for (contract): your account, access, teams, feedback, and licenses that let MeshRep run on your computers, including offline.
- To keep accounts and licenses secure (our legitimate interests): IP addresses and license history let us spot a license being used by someone it wasn't issued to, warn you when an activation code was started from a different network, investigate misuse, and limit repeated attempts. We keep them for a limited time and only our administrators can see the full history. You can see your own computers and where they were last seen on the License page.
- To improve MeshRep (legitimate interests): feedback, files you attach and feature votes.
- To send account emails (contract): confirming your address and resetting your password. We don't send marketing email.
Who processes it for us
- Supabase stores the database, files and sign-ins, in the EU (Ireland).
- Brevo sends account emails (confirming your address and resetting your password), so it sees your email address and the message. It's based in France and stores data in the EU.
- Cloudflare is our network provider: every visit to the site and every license check from the app passes through it, so it sees IP addresses and request details, and it protects the site from attacks. It works worldwide, including in the US.
Where a provider handles your data outside the region it came from, it does so under adequacy decisions or the standard contractual clauses that data protection authorities approve. We don't sell your data or share it with anyone else unless the law requires it.
Your rights
You can ask for a copy of your data, ask us to correct it, delete it or restrict how we use it, object to our use of it based on legitimate interests, and ask for data you gave us in a portable format. Email [contact email]; we reply within one month. You can remove activated computers yourself on the License page. If you're unhappy with how we handle your data, you can complain to the data protection authority where you live.
Changes
If we change this notice we'll update the date above, and tell you in the portal if the change is significant.