Privacy Policy

What we collect

• Account details — your email address, a securely hashed password, username and display name.
• Profile information — anything you choose to add: bio, location, date of birth, gender, avatar and banner images, profile theme, and a featured YouTube video.
• Your content — wall posts, comments, Luv, Top 16, whiteboard doodles and gallery photos you create or upload.
• Technical & usage data — your IP address (used to rate-limit logins and for anonymous, cookieless analytics), the time you were last active, and aggregate profile-view counts.
• Age verification (only if enabled) — if we ask you to verify your age, the photo ID you upload is stored privately and is only ever viewable by an administrator for that purpose.

How we use it, and our legal basis

We use your data to provide the service (create your account, show your profile, deliver posts and messages) — this is necessary to perform our agreement with you. We use limited technical data to keep the service secure and working, which is our legitimate interest. Non-essential analytics and advertising cookies are used only with your consent.

Cookies

We use one essential cookieto keep you signed in — this is required for the site to work and can't be switched off. Our built-in usage analytics are cookieless. If and when we add analytics or advertising cookies, we'll ask for your consent first via a cookie banner, and you can change your choices at any time from the “Cookie settings” link in the footer.

Who we share it with

We don't sell your data. We use these trusted providers to run Mello:

• Supabase — our database and image storage, hosted in the EU (Ireland).
• Vercel — application hosting and cookieless analytics.
• Resend — sending invitation emails.

Each processes data on our behalf under their own terms and data protection agreements.

Where it's stored & how long we keep it

Your data is stored in Supabase's EU (Ireland) region. We keep it for as long as your account is active. If you delete your account, we delete your personal data, except where we must keep something to meet a legal obligation. Any age-verification document is kept only as long as needed to complete the review.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your data, and to object to or restrict certain processing. To exercise any of these, email us at hello@mello.social. You can also complain to your local data protection authority.

Children

Mello is for people aged 18 and over. We don't knowingly collect data from anyone under 18.

Changes

We may update this policy from time to time. We'll update the date at the top when we do.

Contact

Questions about your privacy? Email hello@mello.social.