Privacy · adult test pilot

Learning with less data.

This notice describes the current test implementation. The owner must complete the legal, provider and retention setup before a public paid launch. It is not a certification of GDPR compliance.

Who is responsible?

The pilot controller and support email have not been configured. Checkout remains unavailable until these details are supplied.

What is stored, and why?

• Google supplies a verified email, name and provider account identifier for sign-in. We store a display name, email, account identifier, signed-cookie session records and account dates. We do not accept passwords or retain Google access, refresh or ID tokens.
• Premium bookmarks and review dates are stored only when you explicitly use those controls. We do not record your searches, lesson text, answers, intelligence scores or browsing history in your profile.
• Stripe hosts card entry and recurring billing. Meriweave stores provider customer/subscription/invoice references, amount, currency, status, dates and hosted invoice links. Card numbers, CVV and wallet credentials never pass through our account APIs.
• Service-email records identify an invoice, recipient account and delivery state. Emails confirm activation or renewal; they do not enroll you in marketing.
• Community explanations store your submitted text, supporting public source links, review status and submission dates. They remain private until a human editor accepts them. Public posts show a generic learner label by default. A pen name appears only when you explicitly choose to share it; your account name, email and provider identifiers are never included in the public community feed. Editors can see submissions and record a short private review note and checklist. Keep sensitive or identifying information out of posts, sources and review notes.
• Owner approval of generated catalog explanations records the concept identifier, content fingerprint, editorial checklist, decision and date. These publication records are kept private and do not claim specialist certification. Published explanations remain linked to their approval record; altered content requires another human review.
• Security counters use keyed hashes, short-lived account-operation buckets and minimal action records. Database query parameters, webhook payloads, card data and OAuth tokens are not logged by the application.

Cookies and optional analytics

Signed, HttpOnly account cookies are necessary for login and expire after seven days, with renewal while you use the account. Temporary OAuth state protects sign-in. HTTPS account cookies use Secure and SameSite=Lax. Your cookie preference is kept locally on this device for up to 180 days; use Cookie choices below to change it. Your Light, Dark or System appearance choice is stored only on this device under meriweave-appearance-v1 until you change it or clear browser storage. It is a necessary display setting and contains no identity or tracking identifier. No advertising pixels are installed.

Vercel Web Analytics loads only on the hosted production site after you accept optional analytics. It counts public page views and uses technical request information for aggregate reports, such as browser, device and country. Meriweave sends grouped lesson routes with no topic slug, query string, fragment, name, email, account ID or custom event data. Account, payment, search, private learning records and unknown routes are excluded. The preference version has changed: an old choice from before analytics existed does not authorize this service. Rejecting, withdrawing, clearing or expiring consent stops subsequent page-view collection; browsing and sign-in continue. Analytics stays off if browser storage is blocked. Previously collected reports are not removed by withdrawing consent. Contact the controller about provider retention and data rights; a dashboard reporting window is not a deletion guarantee. Hosting security logs have a separate necessary purpose and retention policy.

Your controls and retention

Your profile includes a JSON export and account deletion. Deletion cancels test subscriptions and removes the profile, sessions, Google account mapping, learning records and pending service-email records, plus your authored community posts and their review history. Your reviewer account attribution is removed from retained publication approvals. Unpublished or withdrawn community posts are removed after 30 days by the owner’s maintenance job. Published posts and their editorial approvals remain until the author deletes them or an editor withdraws them. Approved catalog review records remain while supporting publication. Minimal revoked catalog records remain to prevent accidental republication; their reviewer attribution is removed after 90 days. Your JSON export includes your submissions and review records. Minimal invoice amounts, dates and provider references remain detached from the profile for up to 90 days in this test pilot. Expired session/state records, short-lived security counters and old audit/email records are removed by the owner’s maintenance job. Database backups and Stripe/Google/email-provider records have separate retention and deletion processes; contact the controller for assistance.

Legal basis, providers and rights

The proposed bases are contract necessity for accounts, learning workspace and subscription service; proportionate legitimate interests for security; legal obligation for any future live financial retention; and consent for optional analytics. Cookie permission is separate from the service contract. The owner must record the legitimate-interest assessment, actual hosting region, processor agreements, international-transfer safeguards and country-specific invoice retention before launch.

Google handles identity, Stripe handles payments, Vercel hosts the site and optional analytics, Neon hosts the database, and the configured email provider handles service mail. Their roles and regional settings must be reviewed by the owner. You may request access, correction, deletion, portability, restriction, objection and withdrawal of optional consent as applicable, and complain to your competent data protection authority. We do not sell profile information, use it to train a model, or make automated decisions about intelligence.

Pilot notice version: 2026-10-analytics-v2. Subscription terms.