Privacy Policy
Scope and contact
This policy describes the current technical data practices of MEYLOX.COM, a language-practice and cultural-exchange service. Privacy and data requests: support@meylox.com. The operator’s legal name, official address, final retention and transfer policies still require confirmation and legal review. This notice is not a claim of complete legal compliance.
Information processed
Account email, display name, secure password hash, verification status, role, language and notification preferences are stored. Date of birth and age confirmation support the 18+ access check. Profiles, uploaded photos/audio, posts, messages, connection requests, blocking and reports support the respective services. Security records may contain session times, browser details and hashed IP information.
Google sign-in
When enabled, Google sign-in requests only openid, email and profile. Google account identity, verified email and display name create the account or support secure account linking. Gmail messages, Drive files and contacts are not requested. The Client Secret stays on the server. Google user data is not sold or used for advertising targeting.
Purposes and visibility
Data supports registration, login, verification, password reset, the 18+ check, profiles, messaging, free message translation, preferences, moderation and abuse prevention. Private messages are not used for ad targeting. Age confirmation is not an official identity-document check. Profile and post information may be visible to other members; date of birth is not shown on profiles.
Providers and sharing
MEYLOX uses its server-hosted MySQL database and self-hosted LibreTranslate. A message you ask to translate is sent to this translation service. Verification, reset and support emails use Brevo SMTP. Google sign-in uses Google’s identity service. Incoming info/support/admin@meylox.com messages are forwarded to Gmail. Provider contracts, locations and international-transfer conditions require separate operator review.
Cookies and advertising
Necessary cookies support sessions and security; browser local storage holds language and consent preferences. Real advertising is disabled. Before enabling an ad network, the policy must be updated and applicable consent and Google regional CMP requirements satisfied. The current preference panel is not represented as a Google-certified CMP. See the Cookie Policy.
Security, retention and deletion
HTTPS, password hashing and encrypted server-side TOTP secrets are used, without an absolute security guarantee. In-app account deletion removes the account, linked data and owned media from the active system. Existing backups are not instantly rewritten by deletion. No fixed retention period or immediate deletion of every backup copy is promised before the operator approves the backup lifecycle and legal/security retention policy.
Your requests
Contact support@meylox.com for information, access, correction and deletion requests. Account ownership may need verification. Never send passwords, TOTP/recovery codes or reset links. Controller identity, legal bases and international-transfer assessment must be completed before this notice is considered a complete KVKK/GDPR disclosure.