Privacy

Who we are

Meleon is run by Jackson Annese in Massachusetts. Questions about your data go to help@meleon.co.

What we keep

• Your account. You log in with an emailed six-digit code, Sign in with Apple or Google, in the app and on the web. Supabase runs our login and keeps your email address and name, and Resend delivers the code emails. We see your email when you log in, so we can show you which account you’re in. If you log in with Google, Google shares your name, email address and profile picture with Supabase. If you use Sign in with Apple, Apple shares your name and email address, or a private relay address if you hide your email, with Meleon through Supabase. We use them to log you in, to suggest your handle and to fill in your name in the app, and we don’t share them.
• Your shop. Your shop name, handle, bio, location and link. These show on your shop page, so anyone can see them.
• Your listings. Photos, any short videos, descriptions and prices, stored privately in Cloudflare R2. Drafts are only shown to you. Once a listing is live, buyers can see it.
• Phone photos. Photos you take with Connect to computer that never make it into a listing are deleted after 30 days. We also keep the name of the phone and the browser you connect, so you can tell them apart.
• Orders. What sold, who bought it, which shop sold it, the prices, and Stripe’s payment reference. Payments go through Stripe, which may also ask for your email and billing details at checkout. Your card details go straight to Stripe, and Meleon never sees or stores card numbers.
• Saved addresses. If you save a shipping address in the app, we keep it with your account. It fills in the app’s address and card steps and shows in Account, where you can remove it. A billing address is kept with your card and removed when you remove the card. On iPhone, what you type into the address search goes to Apple to find matches.
• Saved cards. If you save a card in the app, Stripe keeps it. The card number goes to Stripe, never to Meleon. The name and billing address you give with the card go to Stripe with it. We keep a reference to your record at Stripe, and Account shows the card by its brand and last four digits. Remove in Account detaches the card from your account and deletes the billing address saved with it.
• What you’ve seen. When you’re logged in, we note which listings you’ve already swiped past, so the feed keeps showing you new pieces.
• Notify me. If you leave your email on a shop page to hear when a drop goes live, we use it only to tell you about that shop’s drops, and we stop when you ask.
• Server logs. Our servers keep the usual logs to keep things running, and these can include your IP address.

A photo or video file can carry the place it was taken. Shots taken with Connect to computer have that removed. Photos and videos you upload any other way keep whatever your camera saved, so turn off location in your camera settings if you don’t want it in there.

Cookies and tracking

On the web we use a couple of cookies to keep you logged in (your login and the time you last visited), plus a couple of short-lived ones while you log in. No ads, no analytics, no tracking pixels.

The app and your browser also save a few things on your own device, like your cart and unsaved drafts.

Who else handles it

We don’t sell your personal data, and we don’t share it for ads. These companies help run Meleon and handle your data only to do that job:

• Supabase, for logging in
• Resend, for sending login codes
• Cloudflare, for photo storage and our domain
• Railway, which hosts our servers and database
• Stripe, for payments and saved cards
• Apple, if you use Sign in with Apple, and to find matching addresses when you type one in the iOS app
• Google, only if you log in with Google

We’d also share data if the law required us to.

Keeping and deleting

We keep your account while you use it. To delete it, or to get a copy of what we have on you, email help@meleon.co from the address you log in with. We delete your profile and listings, and keep order records only where we need them for taxes or payment disputes.

Age

Meleon is for people 13 and older. If you’re under 18, you need a parent or guardian’s OK, and an adult’s card to buy. If we learn someone under 13 has an account, we delete it.

Changes

If we change this page, we’ll update the date at the top. If it’s a big change, we’ll tell you before it takes effect.