Privacy Policy
Effective 3 November 2026
This policy explains what MesoMind collects, why, and what we do not collect. We have kept it specific rather than generic, so you can check it against what the Software actually does.
What we collect
- Account details. Your email address and a hashed password. We never store your password itself.
- Licence data. Your licence key, plan, expiry date, and a hardware fingerprint of the machine the licence is bound to.
- Usage counters. On the free tier, the number of seconds run in the current week, so the weekly limit can be enforced. This is a running total, not a record of what you did.
- Payment records. Invoice or order reference, amount, currency, and the payment provider's transaction id. For PayPal payments this can also include the name and email address on your PayPal account, as sent in PayPal's payment and dispute notifications. We use these to match a payment to your account, to handle disputes, and to answer support questions.
- Account messages. Messages we send to your in app inbox, such as your licence key after a purchase.
- Bug report screenshots. Only when you choose to send one from inside the Software. These are never captured automatically.
- Problem reports. Only when you press "Report a problem" in the Software and then press Send in the window that lists what will be sent. A report holds the last 25 seconds of your game picture (anything visible in the game is in it, such as a character name or the chat box), the end of the Software's log, your settings (numbers, switches and short choices only, no names or messages), your own note, and the Software's version and platform. Your computer's and Windows account's names, email addresses, your licence key and tokens are taken out of the log before it leaves your computer. A report is linked to your account so we can reply, is kept for 45 days and then deleted, and we delete it sooner if you ask with its code.
- Mini-game clips. When the Software loses a mini-game or is unsure of the answer, it sends a short clip of the mini-game window only, never your whole screen, chat or names, with the Software's answer and an anonymous install id (a hash of the machine id). The free plan has this on in return for extra free hours each week; on paid plans it is a switch in the settings. We use the clips to improve the mini-game solvers.
- Hunting failure reports (optional, off by default). A separate switch in the settings, "Also send hunting failures", lets the Software send a short package when the hunt goes wrong: the character stuck in one spot for ten minutes, or the Software pausing itself after no progress for a while. The package holds the last 20 seconds of the game window, shrunk, the last lines of the Software's own log with e-mail addresses, keys and your computer's names taken out, and the Software's recent decisions. This is the whole game window, so names and chat shown on screen are in it. At most one package per kind every 30 minutes, about 3 MB. It is never on unless you switch it on, and you can switch it off at any time.
- Telegram. If you connect Telegram in the settings, we keep your Telegram chat id so the Software can reach your chat. The short alert texts, and the commands and button presses you send to the bot, pass through our server and are not stored by us, apart from a short in memory queue (a minute or so, emptied when the server restarts) so your bot can pick a command up. Telegram itself receives these texts and pictures as the recipient and applies its own privacy policy. Alerts to Discord, ntfy or Bark go from your computer straight to that service and never reach us.
- Telegram screenshots (off by default). Only if you turn on "Allow screenshots from Telegram" in the settings, and only when you ask for one with /screenshot or its button: one picture of the screen area of the game window, taken at that moment while the game is in front, passes through our server to your own Telegram chat. It is not stored or logged on our side. It can show what is in that area, such as chat lines, character names and anything drawn over the game, like a notification.
- Chat through Telegram. A line you write to the bot in Telegram for your character to say in the game passes through our server: it is held in memory for a minute at most, until your bot picks it up, and is not stored or logged. If you choose to send the game's chat to Telegram in the settings, the chat lines your bot reads, which can include other players' names and messages, pass through our server to your own Telegram chat the same way.
- Server logs. Standard web server logs, including IP address and timestamp, kept for security and abuse prevention.
What we do not collect
- We do not capture your screen in the background. Screen reading happens locally on your computer and those frames are never uploaded. The exceptions are the mini-game clips and the problem reports you send, described above, and the picture you ask your own Telegram bot for with /screenshot, if you allowed it.
- We do not collect your game account name, password, or character data.
- We do not read files on your computer outside the Software's own folder.
- We do not sell your data, and we do not share it with advertisers or data brokers.
- We do not run third party advertising or analytics trackers on the website.
Why we hold it
To run your account and licence, to take payment, to enforce the free tier limit, to answer support requests, and to detect fraud and licence sharing. We do not use your data for any purpose beyond operating the Service.
Cryptocurrency payments
Payments are processed by a third party crypto payment provider. When you pay, that provider receives the invoice amount and your blockchain transaction, and it applies its own privacy policy and compliance checks. We receive back only the payment status and reference. We do not receive your wallet's private keys, and we never ask for them. Blockchain transactions are public by nature and are outside our control.
PayPal payments
If you pay with PayPal, PayPal processes the payment and receives the payment details it needs, such as your name, email address, and payment method, directly from you. It applies its own privacy statement to that data. We receive back the order and transaction ids, the amount, the payment status, and PayPal's notifications about the payment and any dispute, which can include the name and email address on your PayPal account. We never see your card number or your PayPal password. To show the PayPal button, the dashboard loads PayPal's own script, which may set PayPal cookies and collect device information for fraud prevention.
Hardware fingerprint
The Software derives a fingerprint from your computer's hardware so a licence can be bound to one machine. It is stored as an identifier tied to your licence. It is not used for tracking you across other software or websites, and it is not shared with anyone.
Email
We use your email address to identify your account and to reply when you contact support. Your licence key and account notices are delivered to the inbox inside the dashboard and the Software, not by email. We do not send marketing email.
How long we keep it
Account, licence, and payment records are kept while your account exists, and afterwards only as long as needed for legitimate business or legal reasons, such as fraud prevention and financial records. Usage counters reset weekly. Bug report screenshots are deleted once the report is resolved. Blocked hardware fingerprints are kept indefinitely so a ban cannot be undone by making a new account.
Security
Passwords are hashed. Traffic to the website and API runs over HTTPS. Access to the production server is restricted to key based administrator login. No system is perfectly secure, and we cannot guarantee absolute security.
Your rights
You may ask us for a copy of the data we hold about you, ask us to correct it, or ask us to delete your account and its data. Email MesoMind.help@proton.me from the address on the account. We will respond within 30 days. Deleting your account ends any remaining subscription time without refund, and we may retain payment records and blocked fingerprints where we have a legal or anti fraud reason to do so.
Children
The Service is not intended for anyone under 18, and we do not knowingly collect data from children.
Changes
We may update this policy. Material changes will be posted here with a new effective date.
Contact
Email MesoMind.help@proton.me with any privacy question.