Meridian Events Calendar
Who the controller is
The data controller is [LEGAL-ENTITY], [REGISTERED-ADDRESS]. Contact: .
This website
There is no analytics on this site. No Google Analytics, no Plausible, no Facebook pixel, no heatmap, no session recorder, and no advertising tag. We do not set a cookie, and there is no cookie banner because there is nothing to consent to.
The tools on this site — the recurrence expander, the .ics reader, the timezone checker, the file builder — run entirely in your browser. Whatever you paste into them stays in the tab: nothing you put into a tool is uploaded, and the site itself is static files with no server behind it to upload anything to.
One form here does transmit something. If you use the lost-key form, the email address you type into it is sent to our licence service, so that it can email your key back to you. That happens when you press the button, and not before.
Our hosting provider keeps ordinary server logs, which include IP addresses, for a short period and for the purpose of running and protecting the service. We do not read them for marketing.
If you buy Pro
Checkout is handled by Paddle, who are the merchant of record. Their checkout runs in an overlay on this site and loads their own script when — and only when — you click the button. Paddle receive your name, email address, billing country and payment details, and they process them under their own privacy policy. We never see or store your card details.
We receive from Paddle: your email address, your country, and the fact that a purchase happened. That is what a licence key is issued against and what we use to email you the key and to email you if something material changes.
The free plugin
The free plugin makes no outbound network requests of any kind. No licence check, no update ping, no usage statistics, no “anonymous telemetry”, no opt-in tracker, no phone home. It cannot report anything about your site to us, because it never contacts us. This is also stated in its listing on WordPress.org, where hiding such a call would be grounds for removal.
Pro, and exactly what it sends
Pro contacts one service of ours. Four calls to it exist, and these are all four. If you have not entered a key, or this copy has no service address configured, none of them happen at all — that is checked before the request is built, not after.
| When | What is sent | Why |
|---|---|---|
| Once, when you enter a key on the Licence tab and press activate | Your licence key, and a label identifying this installation: your site's hostname followed by a short random string generated once and kept on your site | To activate the key, and to let a staging copy be told apart from production instead of counted as the same site |
| At most once every seven days, and only during a WordPress admin request or a WP-Cron run | Your licence key and the activation id. Nothing else | To check the licence is still valid and to bind it to your site rather than to the world |
| Only when you submit the “lost your key” form on the Licence tab | The email address you type into that form, and nothing else. It is never sent on its own | To email your key back to the address it was bought with |
| When WordPress checks for plugin updates, at most every twelve hours | Your licence key, the product name, and the installed version number | To answer whether a newer version exists and to hand back a download link that only works for a valid licence |
All four also carry your site's address — the whole address, not only the hostname — together with the plugin's version number, in the standard User-Agent header. That is how a licence is tied to the site using it. It is written down here because it is a real transmission of a real identifier, not because it is hidden anywhere.
None of these calls happens on a page a visitor is looking at. Your visitors never trigger a request to us, and your events, your post content, your feed contents and your visitors' details never reach us at all. If our service is unreachable, nothing visible happens and your site is not slowed down.
When Pro syncs a calendar feed, your own WordPress server fetches the .ics address you gave it, directly from Google, Microsoft, Apple or whoever hosts it — hourly, and whenever you press “Fetch now”. That traffic goes from your server to them: it does not pass through us, we never see it, and it carries nothing about your licence. It does carry your site's address, in the same User-Agent header, so whoever hosts the feed can see which site is subscribing. And if you chose the “Google API” source type for a feed instead of an iCal address, that request also carries the Google API key and the calendar id you entered, under Google's privacy policy.
How long we keep things
Licence records — email address, key, activations and site hostnames — are kept for as long as the licence exists and for six years afterwards, because tax law requires the transaction records to be retained. Support emails are kept for two years and then deleted.
Your rights
If you are in the UK or the EU, you have the right to ask what we hold about you, to have it corrected, to have it deleted, to object to processing and to receive it in a portable form. Email and you will get an answer from a person within thirty days. Purchase records that tax law requires us to keep are the one thing we cannot delete on request, and we will tell you plainly if that applies.
You may also complain to your national data protection authority.