What this site records

None on meliura.com. The pages are static, there is no login and no session, so there is nothing for a cookie to hold. audits.meliura.com, where checkout and the free run live, sets one first-party visit cookie so a checkout can be matched to the page it started on. It holds a random number and nothing else, and its own privacy page describes it.

We count five things on our own server: a page opened, a choice between the creator and operator pages, a sample run opened, a button pressed, and a link that leaves the site (we keep only the other site’s name). Each count carries the page path and the minute it happened. It carries no cookie, no identifier, no IP address, no device or browser details, no query string and nothing you typed, so no two counts can be joined into one person’s visit. The counts go to audits.meliura.com, our own server, and nowhere else. They are deleted after 13 months.

The forms on this site post to audits.meliura.com, our own server. Nothing you type goes to a mailing-list company, an analytics company or anyone else. What happens to it:

• Your address is stored encrypted, under a key that is not kept in the database. We also keep a one-way fingerprint of it, so we can recognise the same address and honour a request to stop.
• We send one email asking you to confirm. Nothing else comes until you press its link. If you never do, the sign-up and the address are deleted after 30 days.
• We keep what you chose to tell us: the niche and platform for a run, or the business name and booking page for a check. We keep a booking page address only up to the “?”, because what follows it can carry details that are not yours to share.
• We record that you ticked the box, the exact words it said, and when. If those words change, your record still names the ones you agreed to.
• Your address never appears in a link, a page address, a log line or an analytics count. The page you come back to after signing up says only whether it worked.
• Every email we send has an Unsubscribe button your mail app can show, and one press stops that list for good. Replying “stop” does the same.
• The form has no CAPTCHA and no third-party bot check. Your browser is not sent to anybody else to prove you are a person.

There are none. Schibsted Grotesk and JetBrains Mono are served from this domain, so no font provider is told which pages you read. No tag manager, no embedded video, no chat widget, no social pixel.

The web server records the usual request line: time, path, response status, and the IP address the request came from. Those logs are kept for 30 days and are used to keep the site up and to find abuse. They are not joined to anything else and are not sold or shared.

Payment is taken by the payment processor named at checkout: Stripe for our own services, Whop for the setup deposit. Our service checkouts ask where to send your receipt before the card step; that address is stored the same way as a sign-up. Your card details go to that processor and never touch this site or any server we run. We receive from it your name, email, the amount and the order reference, and we keep those for six years because tax law requires it. What each service collects after payment, how long it is kept, and how to have it deleted is printed on that service’s own page:

• Transportation booking audit
• Whop migration and revenue automation setup

Email [email protected] and say what you want removed. We delete it within 30 days and confirm in writing. You do not need an account, a form or a reason. Records we are legally required to keep for tax are the one exception, and we will name them if any apply to you.

We work from your public pages, with no logins and no account access. If you want the findings to reach further, add an evidence pack: read-only exports you choose to send, such as an analytics or call report. It is optional, and the audit is complete without it.

An evidence pack is files you export from your own systems and send us, such as an analytics report, a search console export, a business profile export or a call log. We never ask for a login, a password or a connected account, so nothing we hold can change anything of yours. Raw exports are deleted 30 days after your report is published. The figures we worked out from them are kept for 400 days so a finding stays checkable, then deleted. Where an export contains other people’s details (a call log does), we use them only to work out those figures and never contact anyone in them.

You can ask what we hold about you, have it corrected or deleted, and object to how it is used, by writing to [email protected]. We answer within 30 days. If you are unhappy with the answer you can complain to the Information Commissioner’s Office in the United Kingdom, or to the data protection authority where you live.

MELIURA LTD, company number 17456307, registered in England and Wales, registered office 128 City Road, London, EC1V 2NX, United Kingdom, is the data controller. Reachable at [email protected], or [email protected] for company matters.

Last changed 27 September 2026.