Overview
Meridian is a media literacy tool. We collect very little data, we do not sell anything, and we do not build user profiles. This policy applies to users in the European Union (GDPR), the United Kingdom (UK GDPR), and California (CCPA), as well as all other visitors.
What we collect
Browser storage (local only)
Meridian stores the following in your browser's local storage. This data never leaves your device and is never transmitted to our servers:
- Accessibility font preference (dyslexic-friendly mode on/off)
- Notification prompt dismissed status
- Cookie consent choice
Push notification subscriptions
If you choose to enable push notifications, your browser generates a unique subscription token (endpoint URL, encryption keys). This token is stored securely in our database (Supabase) solely to deliver notifications. It is not linked to any personal identity. You can revoke this at any time by disabling notifications in your browser settings — your subscription record will be automatically removed when it expires or when delivery fails.
Anonymous performance analytics
With your consent, Meridian uses Vercel Analytics and Speed Insights to collect anonymous, aggregated data such as page views and load times. No cookies are used. No IP addresses are stored. No cross-site tracking occurs. If you decline consent, these services do not load.
No account data
Meridian has no user accounts, login, or registration. We do not collect names, email addresses, or passwords.
Legal basis for processing (GDPR)
Legitimate interests — anonymous analytics help us understand how the service performs. These are aggregated, cookieless, and carry no meaningful privacy risk.
Consent — analytics are only loaded after you explicitly accept. Push notification subscriptions require active opt-in via your browser.
Strictly necessary — browser storage for accessibility preferences and consent status requires no additional legal basis.
Your rights (EU / UK)
Under GDPR and UK GDPR you have the right to:
- Access — request a copy of any personal data we hold about you
- Erasure — request deletion of your push notification subscription at any time
- Portability — receive your data in a machine-readable format
- Object — object to processing based on legitimate interests
- Withdraw consent — change your cookie preference at any time by clearing your browser's local storage for this site
To exercise these rights, contact us at the address below. We will respond within 30 days.
California residents (CCPA)
Meridian does not sell, share, or trade personal information. California residents have the right to know what personal information is collected, request deletion, and opt out of sale — though we have nothing to opt out of. To submit a request, contact us at the address below.
Third-party processors
- Vercel — hosts the web application and (with consent) collects anonymous performance metrics. Vercel Privacy Policy
- Supabase — stores article data, AI analysis results, and push notification subscriptions. Data is stored in the EU. Supabase Privacy Policy
- Anthropic Claude — performs AI analysis on publicly available article text. No personal data is submitted to Anthropic. Anthropic Privacy Policy
Data retention
Article content and analysis results are retained to power narrative tracking features. Push notification subscriptions are retained until you revoke browser permission or the subscription expires. Local browser storage persists until you clear it. Anonymous analytics data is retained by Vercel per their own retention policy.
Children
Meridian is not directed at children under 13 (or under 16 in the EU). We do not knowingly collect data from children.
Changes to this policy
Material changes will be reflected in an updated date at the top of this page. Continued use of Meridian after changes are posted constitutes acceptance of the updated policy.
Contact & data controller
Meridian is operated independently. For privacy requests, rights exercises, or questions about this policy, contact us via primemeridiannews.com. EU/UK users have the right to lodge a complaint with their local data protection authority.