Last updated: June 6, 2026
This Privacy Policy explains what information MeSpace ("MeSpace," "we," "us") collects, why, how we use and protect it, and the rights you have over it. We built MeSpace to be privacy-respecting: no ad-tracking, no behavioral profiling, and we never sell your data. For privacy questions or to exercise any right below, email hello@mespace.cool. For the purposes of the EU/UK GDPR, MeSpace is the data controller of the information described here.
🌱 First, what "collect" actually means here. It does not mean we read or snoop through your stuff. "Collect" just means our system receives and stores what you give it so it can do the thing you asked. For example: when you type a message to a friend, our system collects (stores) that message only so it can deliver it to the person you sent it to. Your data is collected to make MeSpace work for you — not to be sold, mined, or handed to advertisers.
We use your information only to run MeSpace, and under the GDPR we rely on these legal bases:
We do not use your data for behavioral advertising or automated decisions that produce legal or similarly significant effects about you.
MeSpace does not sell your personal information and does not "share" it for cross-context behavioral advertising, as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA). We have not done so in the past 12 months. Because we don't sell or share, there is nothing to opt out of — but you still have the rights described below.
We use a single essential cookie to keep you logged in. We do not use advertising, analytics, or cross-site tracking cookies, so there's no tracking consent banner to click through.
Depending on where you live (including under the GDPR in the EU/UK and the CCPA/CPRA in California), you have the right to:
To exercise any of these, use Settings or email hello@mespace.cool; we'll verify your request against your account and respond within the timeframe the law requires (generally 30 days under the GDPR, 45 days under the CCPA). You may authorize an agent to act for you. EU/UK users also have the right to lodge a complaint with their local data-protection supervisory authority.
We keep your information for as long as your account is active. When your account is deleted (at your request), we remove your profile and content from our live systems promptly, and from routine backups within 30 days. We may retain limited information longer where necessary to comply with legal obligations, resolve disputes, or enforce our Terms (for example, records of confirmed safety violations).
We use a small set of trusted providers to run MeSpace, who process data only on our instructions to provide their service: Vercel (hosting), Neon (database), Vercel Blob (image storage), Postmark (transactional email), and Anthropic (on-demand translation).
MeSpace and several of our providers are based in the United States, so if you access MeSpace from outside the US your information will be processed in the US. Where required for transfers of EU/UK personal data, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
Passwords are stored only as salted hashes, connections are encrypted in transit (HTTPS), and access to systems is limited. No method of transmission or storage is 100% secure, but we work to protect your information and will notify you and regulators of a breach where the law requires.
MeSpace is not directed to children under 13, and we do not knowingly collect personal information from them. We ask for date of birth at sign-up to enforce this. Members aged 13–17 default to friends-only, non-indexed profiles and are excluded from open people search. If you believe a child under 13 has created an account, email hello@mespace.cool and we will delete it promptly.
If we make material changes, we'll update the date above and provide notice within the Service. Continued use after an update means you accept the revised policy.
Questions or requests about your privacy? Email hello@mespace.cool.
This policy describes how MeSpace actually operates and is written to reflect the requirements of the GDPR, CCPA/CPRA, and COPPA. It is provided for transparency and general information, and is not legal advice.
