Privacy policy
This policy explains what personal data MEKAWIRE handles when you read the site, create an account or use its features, and what you can do about it.
Who is responsible
The legal name and country of the company that operates MEKAWIRE will be published on this page. For any privacy question or request, write to [email protected].
When you read the site
To deliver pages and protect the site from abuse, our servers and our network provider, Cloudflare, process your IP address, browser details and the pages you request. Cloudflare may set strictly necessary security cookies.
We use Google Analytics 4 to count visits and see which pages are read. It runs in Consent Mode with advertising signals always switched off. For visitors in the European Economic Area, the United Kingdom and Switzerland it sets no analytics cookies and sends only cookieless measurements. Elsewhere it sets Google Analytics cookies to tell visits apart.
We also use Naver Analytics to count page views, mainly for our Korean audience. Naver may use cookies for this.
Accounts
If you create an account we store your email address, your name if you give one, a scrypt hash of your password (never the password itself), your preferred edition and your email preferences, along with your watchlist and alerts.
Signing in sets a session cookie (rn_session) that lasts 30 days. It holds a random token; we store only a hash of that token, together with the IP address and browser user agent of the sign-in, to keep the account secure.
The Ask feature
When you ask a question, we store the question and the answer. If you are signed in, they are linked to your account; if not, they are stored under a keyed one-way hash (HMAC) of your network address, not your IP address. Ask answers from the MEKAWIRE database and currently sends questions to no AI model provider. If an AI model provider is enabled for Ask in the future, questions will be sent to it and this policy will say so. Please do not put personal or confidential information in a question.
Ask has a daily limit. For visitors without an account we count questions with a signed cookie (rn_ai_usage, about 36 hours) and a daily counter stored under a keyed hash (HMAC) of your network address (for IPv6, only the first half of the address).
Votes on stories
When you vote a story bullish or bearish, a signed-in vote is linked to your account. A vote without an account is stored under a keyed hash (HMAC) of your network address, which lets us count one vote per reader without storing your IP address.
If email delivery is switched on, account holders receive the Daily Brief and alerts for the companies and topics they follow, sent through an email delivery provider. To stop them, write to [email protected]. Messages to that address are read and handled by the AI desk, so their content is processed by our AI model provider. When you write to us, we keep your message and address to handle your request.
Payments
If you buy a paid membership, payment is handled by Stripe. We receive your subscription status and billing details from Stripe but never see or store your full card number.
What we do not do
- We show no advertising and set no advertising cookies.
- We do not sell or rent personal data, and we do not share it for advertising.
- We do not build advertising profiles of readers.
Who processes data for us
We use service providers who process data on our behalf: Cloudflare (network and security), Google (analytics), Naver (analytics), our AI model provider (running the AI desk and handling messages sent to it), our email delivery provider and, for paid memberships, Stripe. Some of them process data outside your country, including in the United States; where the law requires it, transfers rely on safeguards such as standard contractual clauses.
Legal bases
Where the GDPR or similar laws apply, we rely on: performing our agreement with you (accounts, memberships, email you asked for); our legitimate interests in running, securing and measuring the site, enforcing usage limits and preventing abuse; and your consent where the law requires it.
How long we keep data
We keep personal data only as long as we need it for the purposes above. Account data is kept while your account exists and deleted when you ask us to close it. Sessions expire after 30 days. Quota counters are kept per day. Logs needed for security and abuse prevention are kept for a limited period.
Your rights
Depending on where you live, you can ask to access, correct, delete or export your personal data, object to or restrict its use, and withdraw consent. Write to [email protected]; we answer within the time the law allows. You can also complain to your data protection authority.
Children
MEKAWIRE is not directed at children under 16, and we do not knowingly collect their personal data.
Changes
If we change this policy, we update this page and its date. For significant changes affecting account holders, we will tell them by email if email delivery is on.