Privacy, written the way we would want to read it.

01Who this page is for

This policy covers anyone who opens Meruvor during the private preview and anyone who uses it after launch. It is written in plain words because a privacy policy you cannot understand is a promise you cannot check. It sits alongside the terms and conditions; where the two differ, the plainer one wins.

02What we collect and why

The preview collects a deliberately short list of things:

• A random visitor reference, so your journey reads as one continuous story instead of a crowd of strangers.
• Journey events: that a visit happened, what service was searched, which destination, how far someone got. This is how we learn whether the site is clear or confusing.
• City, region, country and timezone, looked up once per visit, so we can offer prices in a sensible currency and times in your own clock.
• Your name, email and phone, and only these three, if you type them into the chat gate or an enquiry form. That is the only personal data we ever ask for.

We do not collect device fingerprints, advertising identifiers, keystrokes, scroll heatmaps or anything of that family. If a tool of that kind ever appears, this page changes first and loudly.

03What never leaves your browser

• Saved places and trip previews. They live in your browser storage and are never uploaded.
• Your day or night theme and your currency choice.
• Anything you type into account forms, including passwords, which are checked locally and then discarded.
• Your chat gate details, until you choose to send an enquiry. If you never send one, they stay on your device.

Clearing your browser data for this site removes every one of these, completely.

04Your IP address, handled carefully

Every website that offers a local currency or a live clock needs a rough idea of where you are. Most send your IP address to whichever geo service they use, straight from your browser. We do not. Your browser asks our own endpoint, our server resolves the location, and only the answer, a city and a country, comes back to you.

• No third-party geo service sees your IP address from your browser.
• The lookup result is cached on our server for up to ten minutes and never longer.
• Your IP address is stored with your anonymous visitor record, so the owner can see a city on the console. It is not published, shared or sold.
• If the lookup fails, the site simply stays in US dollars. Nothing breaks, and no retry storm follows.

05Accounts and passwords

The preview has full account pages, and they are honest theatre: the forms validate locally, confirm success, and store nothing. No password is saved, hashed, sent or transmitted anywhere in the preview. When real accounts arrive before launch, passwords will be hashed with a modern slow function, never stored in plain text, and never visible to anyone, including us.

06Every piece of browser storage we use

The complete list, with nothing held back:

That is the whole list. There are no other cookies, no trackers and no hidden keys.

07Third-party services in the preview

The preview uses three community services: a live aircraft feed, a flight route database and a location lookup. All three are called by our server, not by your browser. They see our server making a request; they do not see you, your IP address or your browsing. The requests carry our own name and a contact route, because responsible use of free community services means being reachable.

The database behind the preview runs on Supabase, a hosted Postgres service, under our account. It holds the anonymous records described in section 2 and nothing else.

08Cookies, ads and selling: none

There are no tracking cookies, no advertising cookies, no social pixels, no session replay, no analytics scripts from other companies, and no data broker of any kind in this build. We have nothing to sell because we have taken nothing worth buying. The visitor records exist to understand the preview, and their value begins and ends there.

09How long we keep things

• Browser storage: until you clear it yourself.
• Anonymous visitor records and journey events: for the life of the preview, so the owner can follow what needs fixing.
• Enquiry contact details: until the enquiry is answered and closed.
• Nothing is kept after it has a clear purpose.

10Your choices

• Open your browser settings and clear site data for Meruvor. Your saved places, trips, theme, currency and visitor reference are gone in one move.
• Use the site without ever typing a name, email or phone. Everything except an enquiry works without them.
• Ask us to delete a specific record. Quote your visitor reference, which you can see is random, and we will remove it and confirm.
• Block JavaScript or storage entirely. The preview becomes a quiet brochure, and it will not fight you.

11What changes when we launch

Launch adds real bookings, and real bookings add real obligations. We will need your card details for payment, processed by a licensed provider so the numbers never rest with us. We will need your traveller names for tickets. Receipts will need your email. Each of those arrives with its own explanation, its own consent, and its own entry on this page, and this page will be updated the day the first one goes live, not quietly afterwards.

What will not change: no ad tracking, no data selling, no buying lists, and the principle that you can always ask what we hold and have it removed.

12Contact

Privacy questions go the same way as everything else: through the help and security hub. Ask plainly, and you will get a plain answer, from a person, not a template.