What we collect
This information comes from Discord when you sign in with it. Mesoplox stores:
- your Discord ID, username, display name and avatar
- your Discord account creation date, which is derived from your Discord ID
- your Discord email address, which Discord shares with our sign-in provider. We don't show it, use it to contact you, or share it.
Avatars are loaded from Discord's servers, so your browser contacts Discord when avatars appear.
As you use the site, it also stores what you create:
- your Listings
- your Trade Chat messages and your messages to a GM
- your Trades, including whether each one was confirmed
The account creation date is used to decide whether you are an Eligible Player, which affects Reputation and prices.
What is public
Your display name, avatar and Reputation are public on your profile and Listings.
Confirmed Trades are public: which two Players traded, the Item, the quantity, the Unit Price and the date. This is how prices and Reputation stay verifiable.
Your Discord username is shown only on Listings where you chose Discord as the way to reach you.
Cookies
Mesoplox sets a sign-in session cookie (which may be split into several parts, plus a short-lived one during sign-in) and a theme cookie. The help widget remembers in your browser's session storage that you've seen its prompt. We don't use advertising or analytics cookies: the analytics below work without cookies or browser storage.
Analytics and error reports
We use PostHog to see how the site is used and to find bugs. It records which pages you visit, which buttons and links you click, what you search for, your browser, device type and screen size, and your rough location (country and city). PostHog works out the location from your IP address and then discards the address.
It never records what you type into a chat, the text of chat messages or their previews, or your screen. It isn't linked to your Discord account, and because it uses no cookies, each visit counts as a new, anonymous visitor.
When something breaks, it records the error, the page it happened on and the ids of what was involved, with emails and sign-in tokens removed first.
No ads, no sale of data
There are no ads and no tracking pixels, and your data is never sold or shared for advertising.
Who processes your data
- Supabase provides the hosting, database and sign-in.
- Vercel hosts the website.
- PostHog runs the analytics and error reports, in the United States.
Deleting your data
To delete your account, ask a GM through the help button. Deleting an account removes your profile, your Listings, every Trade Chat you took part in (including the other Player's messages in those chats), your Trades and Trade Reports, and your support messages. Confirmed Trades you were part of then stop counting toward your partners' Reputation and the price history. Data may remain in Supabase's backups for a limited time before it is overwritten.
Contact
For anything about your data, use the GM help button, or see Support. Mesoplox is built and run by one player as a hobby, so replies are usually within a day but not guaranteed.