Privacy Policy
Last updated: 2026-10-23
The short version
- You can use Mesohead without an account. Signing in with Google or Facebook is optional.
- If you sign in we keep your name, email, profile picture and the items you track.
- We log how the site is used (pages, searches, items opened) on our own server, to make it better. No third-party analytics, no ads, and we never sell your data.
- EXP watch and Scan with me run in your browser. Your screen never leaves your computer.
- You can delete your account and its data at any time from the account menu.
- Questions or requests: contact@mesohead.com.
1. Who we are
Mesohead (mesohead.com) is a free, fan-made site for MapleStory Classic World players: a Free Market price index, an item database, EXP watch and Scan with me. It is run by an independent fan, not by a company, and it is not affiliated with Nexon. Mesohead's operator decides how the data described here is used (the "controller" under UK data protection law). You can reach us at contact@mesohead.com.
2. What we collect
When you browse (no account needed)
Our web server receives what every website receives: your IP address, your browser's type, the address you asked for and the time. Our servers keep this in short-lived technical logs to run and protect the site. We do not use it to build profiles.
The site also records how it is used (see usage events) with a random
visitor id from the mh_vid cookie.
When you sign in with Google or Facebook
Signing in is optional. It lets you see prices in real time and track items. From the provider you choose we receive and store:
- your name as shown on that account,
- your email address and whether the provider has verified it (Facebook may share no email; then we store none),
- the address of your profile picture, and
- the provider's id for your account.
We also store when you signed up and when you last used the site, and a session (see
mh_session). We never see your Google or Facebook password and we
never post anything to your accounts.
Tracked items
When you track an item we store which item, when you started tracking it, and any note or target (max) price you set. A target price is kept so the site can show you when an offer is under it (and, in a later version, tell you).
Usage events
To learn which parts of Mesohead are useful, the site records on our own server:
- which page you open (the page's route inside the site, such as
#/item/123, not what you typed into it), - what you search for (the search text),
- filters and sort orders you change (for example the time filter),
- which items you open, track or stop tracking,
- signing in and out, and
- clicks that copy a shop's location, or open another website (which website, not the full address).
Each event carries the random visitor id from the mh_vid cookie and, when you are
signed in, your account id. We do not store your IP address with them, only a one-way hash of it, used
to limit abuse.
Problem reports
If you send a report with Report a problem, we store your message, the page you were on, your browser's type, a little technical state of the page to help us fix the problem, and a one-way hash of your IP address (to limit how many reports one person can send). Please don't put personal details in the message.
EXP watch and Scan with me
Both run in your browser. When you share your game window with them, the picture is read on your own computer; no picture or video of your screen ever leaves your browser. EXP watch sends us nothing about what it reads.
Scan with me is opt-in and needs an invite. While you share, your browser sends us only structured shop reads: the shop's owner name, shop title, items and prices, and the channel and room you are in. We store these reads in the price index, and we keep a small Scan with me profile: the display name you chose, a sign-in token for your browser, when you joined and last shared, and counts of the shops you have helped read. Only you see your own counts. If you are signed in when you join, the profile is linked to your account.
Other players' names
The price index shows each shop's owner name and shop title as the game shows them publicly in the Free Market, with what they sell, their prices and where the shop stands. These are in-game character names, not real names. If you want your shop removed, write to contact@mesohead.com.
3. Why we use it, and our legal bases
UK data protection law (the UK GDPR) asks us to say why we use your data and on what basis:
- To give you the service you asked for (signing you in, showing real-time prices, keeping your tracked items, notes and target prices, showing your name and picture in the account menu): this is needed to provide the service to you (contract).
- To improve the site: understanding which pages, items, searches and features are used, so we can fix problems, decide what to build next and make product decisions: our legitimate interest in running a useful site. We use first-party data only, and you can object (see your rights).
- To keep the site safe: preventing abuse, spam and overload, and securing accounts (rate limits, hashed IP addresses, server logs): our legitimate interest in security.
- Scan with me: you choose to join and to share each time (consent). You can stop sharing at any moment, and ask us to delete your profile.
- Answering you when you write to us or send a report: our legitimate interest in helping you and fixing the site.
We do not sell your personal data, show ads, or use your data to contact you with marketing. We may use the data described above to build new features of Mesohead later (for example, alerts when a tracked item drops under your target price), always for the purposes listed here; if we ever want to use it for something new, we will update this policy first.
4. Who else sees it
- Google Cloud hosts our servers and stores our backups. Google processes the data only on our instructions, under its cloud data processing terms.
- Google or Facebook, when you sign in with them: they see that you signed in to Mesohead, as described in their own privacy policies.
- Google Fonts: our pages load their fonts from Google, so your browser contacts Google's font servers (Google receives your IP address and browser type, not which page you are on).
- Your profile picture is shown from Google's or Facebook's servers, without telling them which page you are on.
- Links to other sites (such as meowdb.com) take you to sites with their own privacy policies.
There are no third-party analytics, advertising or tracking services on Mesohead. We share data with others only if the law requires it, or to protect the site and its users from abuse.
5. Where it is stored
Our servers and backups are in Google Cloud's United States region (us-central1, Iowa), so your data is stored and processed in the US. Google's data processing terms include the safeguards UK and EU law require for such transfers (standard contractual clauses and the UK addendum to them). We protect the data with encrypted connections (HTTPS), store sign-in sessions only as hashes, and limit who can reach the servers.
6. Cookies and browser storage
Mesohead uses only its own (first-party) cookies, readable only by our server, and no advertising or third-party cookies:
| Name | What it is for | How long |
|---|---|---|
mh_session | Keeps you signed in (HttpOnly). Set only when you sign in. | 30 days from your last visit, or until you sign out |
mh_vid | A random visitor id for usage events (HttpOnly). | 1 year |
mh_oauth | Protects a sign-in while it is in progress. | 10 minutes |
The site also keeps a few settings in your browser's own storage, which never reach us by
themselves: your time filter and sort choices (mh.since, mh.homeSort), an
item you asked to track just before signing in (mh.pendingTrack, for that tab only), and,
if you joined Scan with me, your Scan with me token and settings (mm.finder,
mm.scanShops).
You can delete or block cookies in your browser's settings. Without mh_session you
cannot stay signed in; if you block mh_vid the site works normally and your visits
cannot be linked together.
7. How long we keep it
- Your account and tracked items: until you delete your account.
- Sessions: until you sign out, or 30 days after you last used the site.
- Usage events: there is no fixed time limit at the moment; we may set one, and then delete older events automatically. Deleting your account deletes them (see below).
- Problem reports: as long as we need them to look into the problem.
- Scan with me: your profile until you ask us to delete it; shop reads become part of the price index, which keeps prices for the market's history.
- Technical server logs: a short time, for running and securing the site.
- Backups of our database: up to 30 days, then deleted automatically. Something you delete can stay in a backup until that backup expires.
8. Deleting your account and data
Sign in, open the account menu (your picture, top right) and choose Delete my account. Your
account, its name, email, picture, sessions, tracked items and usage events (those linked to your
account and to this browser's visitor id) are deleted at once, and the mh_vid cookie is
removed. A Scan with me profile linked to the account stays, unlinked; to delete it too, write to us.
You can also email contact@mesohead.com (from the address on your account, or with enough detail for us to find it) and we will delete your data within 30 days. Removing Mesohead from your Google or Facebook app settings stops further sign-ins but does not by itself delete what we stored, so please use one of the two ways above.
9. Your rights
Under UK data protection law (and the EU GDPR if you live in the EU) you have the right to:
- access the personal data we hold about you and get a copy,
- rectification: have wrong data corrected,
- erasure: have your data deleted (Delete my account does this at once),
- restriction: ask us to stop using your data while a question about it is sorted out,
- object to our use of your data based on legitimate interests, such as usage events,
- portability: get the data you gave us in a machine-readable format, and
- withdraw your consent for Scan with me at any time (stop sharing and ask us to delete your profile).
To use any of these rights, email contact@mesohead.com. We will answer within one month, and may ask you to confirm it is your account. It is free.
If you are unhappy with how we handle your data, please tell us first so we can put it right. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk, or to the data protection authority where you live.
10. Children
Mesohead is not directed to children under 13 (under 16 in the European Economic Area), and they should not create an account. If you believe a child has given us personal data, write to contact@mesohead.com and we will delete it.
11. Changes to this policy
If we change this policy we will update the date at the top and, for important changes, show a notice on the site before they take effect.
12. Contact
For questions about your data or this policy, or to use your rights, email contact@mesohead.com. See also our Terms of Service.