Privacy Policy
Last updated: 4 September 2026
This Privacy Policy explains how MEHOD ("Meh or Desire", the "Platform", "we", "us") handles information about you. MEHOD is a free, fictional shopping world: we take no payments, so we never collect payment card or bank details, and we never deliver anything, so we do not need your postal address.
1. Who is responsible
The operator of MEHOD is the data controller for information processed through the Platform. You can reach us through the support desk in Settings.
2. What we collect
You give us:
- Your email address when you request a sign-in link.
- Your username, display name, avatar and any profile details you choose to add.
- Items, images, reviews, collection names and support messages you submit.
Created as you use MEHOD:
- Fictional activity: MEH$ balance, purchases, desires, collections, spins, boxes, games,
simulated market positions, badges, levels and streaks.
- Usage and diagnostics: pages viewed, actions taken, timestamps, referrer, device and browser
type, approximate location derived from IP, and error reports.
- Security data: IP address, request patterns and automated-access signals used to detect
scraping, bots and abuse.
We never collect: payment card numbers, bank details, delivery addresses, or government ID.
3. Why we use it (and our legal bases)
| Purpose | Legal basis |
|---|---|
| Create and run your account, save your fictional progress | Performance of a contract |
| Show leaderboards, public profiles and community activity | Legitimate interests |
| Moderate content and automatically classify uploaded items | Legitimate interests |
| Detect scraping, bots, abuse and protect the Platform | Legitimate interests |
| Measure usage and improve features | Legitimate interests |
| Send service notifications (e.g. support replies, sign-in links) | Performance of a contract |
| Comply with legal obligations | Legal obligation |
4. Automated processing
Uploaded items and images may be processed by automated systems (including AI models) to categorise them, generate metadata, and screen for unlawful or unsuitable content. Automated signals may flag or restrict accounts showing scraping or abuse patterns. You can ask us to review any automated decision through the support desk.
5. What is public
Your username, display name, avatar, public collections, badges, level, statistics and leaderboard position are visible to anyone using the Platform. Your email address is never shown publicly. Do not put anything in a public field that you would not want published.
6. Sharing
We share data only with service providers who help us run the Platform — hosting and database infrastructure, authentication, email delivery, error monitoring, analytics and AI classification providers — under contract and only as needed. We may disclose data where required by law, to enforce our Terms, or to protect our rights, users or the public. We do not sell your personal data and we do not share it with advertisers.
7. International transfers
Our providers may process data outside your country, including outside the UK/EEA. Where that happens, we rely on appropriate safeguards such as UK/EU standard contractual clauses or an adequacy decision.
8. Retention
We keep account and progress data while your account is active. Security and audit logs are kept for up to 24 months. Support tickets are kept for up to 24 months after closure. When you delete your account we delete or anonymise your personal data within 30 days, except where we must keep records to comply with law, resolve disputes or prevent abuse.
9. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict, or object to our processing of your data, to data portability, and to withdraw consent. UK/EU users may complain to their data protection authority (in the UK, the ICO). To exercise any right, contact us through the support desk.
10. Cookies and local storage
We use strictly necessary storage to keep you signed in and to remember preferences such as light/dark mode and guest progress, plus limited first-party analytics to understand feature usage. We do not use advertising or cross-site tracking cookies.
11. Children
MEHOD is not intended for children under 13 (or the minimum digital-consent age where you live). If we learn we hold data from a child below that age, we delete it.
12. Security
We use encryption in transit, row-level access controls, least-privilege service credentials and automated abuse detection. No system is perfectly secure; please use a unique email inbox you control and report any concern to us immediately.
13. Changes
We may update this policy. The version published on the Platform is the version in force, and we will highlight material changes in-app.
14. Contact
Use the support desk in Settings to reach the MEHOD privacy team.