mesh1. When you visit the website
This website has no sign-up, newsletter or message form. Our pages contain no advertising pixels, analytics scripts or fingerprinting code. Fonts and images are served with the site itself; no request is sent to a third-party domain while you browse.
The site is published as static files on Cloudflare Workers. To deliver the pages to your device, Cloudflare uses technical data such as your IP address, the time of the request and browser information for its own network security and traffic management; Mesh Mekan does not build visitor profiles from this data.
You can read about cookies and browser storage in the Cookie Policy.
2. When you use the app
Mesh Mekan is a single app for macOS, iOS, iPadOS, tvOS and visionOS, distributed through the App Store. Your account and your data are the same on whichever device you use. The data below is processed only when you use the related feature:
- Account: When you sign in with Apple, Apple’s app-specific user identifier and verification data are used; the account table stores this identifier, your app account ID and your display name. Your Apple password is never given to Mesh Mekan. The account table has no field for an email address; an email address Apple may share during sign-in is not recorded.
- Profile: Online status, status message and avatar color; if you choose to add them, your city, time zone, interest tags and what you are working on. City is a profile field; the app does not track your location with GPS.
- Social features: Your memberships of Mekans, groups and one-to-one conversations, your friendships, messages, read receipts, the files you send and file details (name, type, size, preview) are processed to provide chat.
- Edit history: If you edit a message you have sent, the message’s previous text, the message ID, the Mekan or conversation it belongs to and the time of the edit are stored separately. This is processed only for moderation and dispute resolution; neither you nor the people in the room can see the previous text, and it is not shown on any screen of the app.
- Store: If you open a store, its storefront details (store name, description, address, phone number, image) and product records are stored and shown publicly. The visits and engagement report shown to the store owner consists of totals; the record kept for counting unique visitors is deleted after 30 days, and which user looked at the store is never shown on any screen.
- Safety: Your blocks; the reason for reports you make and reports made about you, the optional 1000-character note and the related account or content IDs; when a name or message is reported, the text of that content at the moment it was reported; and suspension and moderation records are processed for community safety. Reported text is seen only by moderation and is never shown to any user.
- Notifications: When you turn notifications on, your device’s Apple Push Notification service (APNs) token is stored, and notifications are delivered to your device only through Apple’s notification infrastructure. Notification texts pass through Apple.
- Purchases: Subscriptions are made through App Store in-app purchase. The app stores Apple’s transaction and subscription identifiers, the product, the end of the period and the entitlement status; your card number, card security code or billing address never reach Mesh Mekan. No purchases are made on tvOS; the entitlement is bought on other devices and also applies on the TV.
3. Who can see it, and how is it protected?
Your profile and status are shown to other users in discovery and social areas. Content you send to a Mekan can be seen by the people in that Mekan; one-to-one and group messages can be seen by the members of that conversation. Store storefronts and product records are public. Participants can save content or take screenshots.
The app connects to the server only over encrypted (TLS) connections; your session token is kept in your device’s Keychain. Membership and permission checks are made on the server; if you do not have access to a Mekan, its messages are not sent to you. However, the app does not offer end-to-end encryption: messages and files are processed on the server infrastructure in order to run the service. We recommend that you do not write medical, financial or similarly sensitive information in chats.
4. Infrastructure and where your data goes
Mesh Mekan uses two infrastructure providers; both process data only to run the service, and nothing is shared for advertising or profiling.
| Component | What it does | Which data |
|---|---|---|
| Cloudflare Workers | The app’s server API and the hosting of this website | Every request the app sends; the website’s technical access data |
| Cloudflare D1 | Database | Account, profile, membership, friendship, block, report, subscription, file and store records |
| Cloudflare R2 | File storage | Files you send in chats, Mekan and product images and their previews |
| Cloudflare Durable Objects | Live chat, online presence and notification inbox | Mekan and conversation message histories, who is connected, unread counters |
| Apple — Sign in with Apple | Authentication | The user identifier and sign-in token issued by Apple |
| Apple — APNs | Push notifications | Device token and notification text |
| Apple — App Store | Selling and verifying subscriptions | Transaction and subscription identifiers, product and status information |
Cloudflare’s and Apple’s servers may be located outside Turkey; your data is processed abroad through these services. The recipient groups, the basis for the transfer and your rights are explained in the KVKK Privacy Notice. Mesh Mekan does not use advertising networks, analytics services or data brokers.
5. How long is data kept?
The periods below are limits defined in the app’s code; a daily cleanup runs every night at around 03:00 (UTC) and removes records that have passed their limit.
| Data | Retention |
|---|---|
| Messages in standard and large Mekans | 24 hours and the last 200 messages, whichever comes first. A file attached to a message is deleted together with the message. |
| Store messages | No time limit; the last 1,000 messages are kept. When the store closes (shutters down), the whole history is deleted. |
| One-to-one and group messages | No time limit; the last 500 messages per conversation are kept. A closed conversation’s history, files and records are deleted 90 days after it closes. |
| Mekan | A standard or large Mekan that stays empty and quiet for 14 days closes (shutters down). A subscription-based Mekan or store closes 90 days after its rent period ends. A closed Mekan’s chat history is deleted when the shutters go down; its files, products and storefront are deleted at the next cleanup. |
| Uploads not attached to a message | Deleted after 1 hour. |
| Mekan activity log | Kept per day and deleted after 35 days; a buffer for the 30-day rate used for a Mekan’s place on the ladder. |
| Store report | Daily totals for 90 days; the unique visitor count record for 30 days; hourly rate counters for 2 days. |
| Message edit history | The previous text of an edited message is kept for at most 90 days. It is removed earlier if you delete the message, if the Mekan or conversation is deleted, or if you delete your account. |
| Mekan vote record | The outcome of a mute/remove vote held in a Mekan — about whom, on what grounds and with how many votes — is kept for 90 days. It is removed earlier if the person concerned deletes their account. |
| Reports | A report that has been decided is deleted 30 days after the decision. A report not yet reviewed waits until it is reviewed. The text of reported content at the moment it was reported is kept for at most 90 days, even if the report is still open. |
| Connection and street requests | A completed request is deleted after 30 days; a request left unanswered for 30 days is canceled automatically. |
| Purchase intents | Deleted after 7 days. |
| Rate limit counters | 2 days. |
| Notification device record | Deleted if the device is not seen for 180 days; removed immediately when you sign out or delete your account. |
| Account, profile, friendships, blocks | Kept as long as the account exists; removed as described in the next section when you delete your account. |
| Support correspondence | Kept in the mailbox until the request is resolved and any period for a possible dispute has passed; deleted after 2 years at the latest. |
| Infrastructure logs | Cloudflare’s Workers Logs service is turned on so that server errors can be seen; logs are kept for Cloudflare’s own short retention period and are not copied anywhere else. The lines the app writes consist of fixed labels and error types; message text, file content, email addresses or tokens are not written. Cloudflare’s own network logs are subject to the provider’s retention policy. |
A technical fault may delay the cleanup; in that case it continues from where it stopped the following night. Copies and screenshots that other members of a conversation have saved on their own devices are outside these periods.
6. When you delete your account
You can delete your account from inside the app; the steps are on the Account Deletion page. Deletion works in two stages:
- Immediately: The account is marked as deleted, your sessions on all devices are closed, your display name, status message, city and tags are cleared, the link to your Apple account is cut and your notification device records are deleted. From this moment the account is not visible to anyone, and if you sign in again with the same Apple account, an empty new account is created.
- In the background: The Mekans you opened are closed, your store storefront and products are deleted, the files you uploaded are removed from storage, your conversation memberships and friendships are dropped, your notification inbox is emptied and, finally, the account record itself is deleted. This cleanup starts right after the deletion request; if it is interrupted, it continues from where it stopped every night.
In one-to-one and group chats, the sender name and account link of your old messages are removed; the messages remain under the name “Deleted user” and their text is not deleted entirely. Names, phone numbers and similar details you wrote inside a message yourself may remain in that text; if you want these deleted too, say so in your KVKK request. Messages you sent to standard and large Mekans are deleted within 24 hours at the latest anyway. Store Mekans have unlimited history; in the messages you wrote there, your sender name and account link are also removed and the text remains. This cleanup covers the stores among the Mekans you are a regular of and the ones you visited recently; because the app keeps no separate record of “who wrote where”, a visit from long ago may have left no trace. If you remember such a store, just mention it in your KVKK request.
Subscriptions bought through Apple are not closed when you delete your account; you must cancel them separately in your Apple account’s subscription settings.
7. Your choices, your requests and changes
You can edit your profile in the app, block people you do not want to hear from and report content that breaks the rules. You can change notification permission in your device’s system settings; turning it off does not affect your account. Signing out does not delete your account or chat history.
For the data controller, purposes of processing, legal bases and your rights, see the KVKK Privacy Notice; for support and requests, see the Contact page.
When a feature changes how data is used, this text is updated and the date at the top of the page is renewed. A change that requires separate notice or consent is never made only by changing the date on this page.