Privacy policy

Summary

• You can play Meridian without an account and without giving us any personal information.
• Your game progress, statistics and settings are stored only in your own browser.
• Our hosting provider processes technical connection data so the site can be delivered securely.

1. Controller

The controller responsible for data processing on this website within the meaning of the EU General Data Protection Regulation (GDPR) is the operator named in our imprint. You can reach us at ramasbusinessacc@gmail.com.

2. Hosting and delivery

This website is hosted by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (“Cloudflare”), which also delivers it through its content delivery network and protects it against attacks. When you visit the site, Cloudflare processes technical data that your browser sends automatically, such as your IP address, the date and time of the request, the page requested, and your browser and operating system.

This processing is necessary to deliver the website and keep it secure. The legal basis is our legitimate interest in a reliable and secure website (Art. 6(1)(f) GDPR). The host processes this data on our behalf under its data processing agreement (Art. 28 GDPR). Data may be processed in the USA; the host’s data processing agreement provides safeguards for such transfers (Art. 44 ff. GDPR).

3. Data stored on your device

Meridian saves your expedition progress, statistics, streak, settings (theme and distance units) and, where applicable, your consent choice in your browser’s local storage. This information never leaves your device and is not transmitted to us. Storing it is strictly necessary to provide the game you requested (§ 25(2) no. 2 TDDDG). You can delete it at any time with “Reset progress” in the settings or by clearing your browser data.

3a. Email

If you contact us by email, we process the details you provide (your email address, optionally your name, and your message) to answer your request. The legal basis is our legitimate interest in answering enquiries and, where your message concerns a contract, Art. 6(1)(b) GDPR (Art. 6(1)(f) GDPR otherwise). We delete messages once your request has been dealt with, unless we are legally required to keep them.

4. Stream mode (Twitch)

Streamers can either type their channel name or click “Connect with Twitch”. With the login, Twitch Interactive, Inc. (USA) asks them to confirm their account. We request no permissions: the access token Twitch returns only tells us the streamer’s channel name. The token is kept in the browser’s session storage (deleted when the tab is closed or on “Disconnect”) and is only sent to Twitch to check and revoke it — never to us.

In both cases, stream mode reads that channel’s public chat directly from Twitch with an anonymous, read-only connection. Chat messages and usernames are processed only in the streamer’s browser to count answers and show a leaderboard; they are not stored or sent to us. Twitch receives the browser’s IP address as with any connection. The legal basis is the performance of the requested feature (Art. 6(1)(b) GDPR) and our legitimate interest in providing it (Art. 6(1)(f) GDPR).

5. Fonts and map data

All fonts and map data are served from our own domain. No third-party font or map service is contacted.

Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). Where processing is based on consent, you may withdraw it at any time. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

Children

Meridian is a general-audience game and does not knowingly collect personal information from children.

Changes

We will update this policy when our services or the law change. The date at the top shows the latest version.