Privacy policy

Person responsible for personal information

Mediter’s founder is responsible for the protection of personal information. For any question or request: privacy@mediter.io.

Without an account

You can use Mediter without an account. Your preferences, listening history and Pomodoro settings then stay in your browser (local storage). They are not sent to us.

Data we process

• Account: email address and, if you sign in with Google, your name and profile picture. Sign-in is handled by Clerk.
• Account usage: session history, favorites, saved mixes and settings, to sync them across your devices.
• Premium subscription, once available: payment is processed by Stripe. We never see your full card number; we keep your subscription status.
• Technical data: IP address, browser and pages visited, in the logs of our host and sign-in provider, for security and reliability.
• Analytics: currently off. If enabled, it will be cookieless and non-identifying, and we will ask for your consent before any identification.

Sign in with Google

If you choose “Continue with Google”, we receive only your name, email address and profile picture (openid, email and profile scopes). We use them only to create and secure your account.

Mediter’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Why we use it

• To provide the service and your account (performance of a contract).
• To protect the service against abuse and fraud (legitimate interest).
• To manage your subscription and meet tax obligations (legal obligation).
• To measure audience, only with your consent.

We do not sell your data, we do not show ads, and we do not use your data for advertising profiles.

Service providers

Your data is processed by providers acting on our behalf: Clerk (sign-in), Convex (database), Vercel (hosting), Google (sign in with Google) and, for Premium, Stripe (payments). Some are located in the United States, so your data may be processed outside Quebec and the European Union, under appropriate contractual safeguards.

Retention

• Account data: as long as your account exists, then deleted within 30 days of its deletion.
• Technical logs: a few weeks at most.
• Billing records: as long as the law requires.

Cookies

We only use cookies needed for sign-in (Clerk session) and display language. No advertising cookies.

Your rights

You can request access to, correction, deletion or portability of your data, and withdraw consent at any time. Write to privacy@mediter.io; we reply within 30 days.

You can also file a complaint with the Commission d’accès à l’information du Québec or, if you live in the European Union, with your country’s data protection authority.

Children

Mediter is not directed at children under 14 and does not knowingly collect their data.

Changes

We will post any change on this page with a new update date. For significant changes, we will notify you by email if you have an account.