Privacy

Last updated: 15 Oct 2026

This page explains which data Meridius Prime processes about you, why and for how long, under the Swiss Federal Act on Data Protection (FADP).

Controller

Contact: contact@meridiusprime.app.

Without an account

You can browse the map, dossiers and list without an account. Meridius Prime uses no advertising and no trackers. No cookie is set until you sign in.

To measure its audience, the website uses a privacy-friendly, cookieless statistics tool. It counts page views (the page address only, without the map position or any other location), the site you came from, your country, your device and browser type, and the external links you follow. It cannot identify you or follow you from site to site, and your IP address is not stored.

When an error occurs on the website or in the app, a technical report is sent to Sentry so that it can be fixed: the error message, the place in the code, the page (its address only, without the map position), and your device, system and browser type. The report is not linked to your account and holds neither your email address, nor your watched areas, nor any location; your IP address is not stored.

The basemap is loaded directly from the servers of swisstopo (Federal Office of Topography), which therefore see your IP address, as with any site showing their maps. The same goes for the noise maps (FOEN, FOCA), loaded from geo.admin.ch, the same federal service, when you show that layer. Dossiers come from SITG open data; Meridius Prime stores no names of applicants, agents or owners.

With an account

• Your email address, the optional name and your chosen language.
• Your password, only in hashed form, and the public part of your passkeys.
• Your watches. A watched area often reveals where you live: Meridius Prime treats it as personal data. It is used only to send your alerts, never shared (except with an AI app you connect yourself, see below), and kept out of technical logs.
• Your notifications and their state (sent, read).
• For account security: open sessions (with IP address and browser) and counters of sign-in attempts.

The only cookie is the session cookie, needed to stay signed in. Alert emails carry a one-click unsubscribe link.

Connected AI apps

You can connect an AI app (such as Claude or ChatGPT) to your account to ask it about building permits and your alerts. You choose what it may do when you connect it. It receives the information it looks up at your request, including your watched areas if you allow it, and processes it under its own terms, for which Meridius Prime is not responsible. Meridius Prime keeps the app's name, the permissions you granted and access tokens until you disconnect it from your account.

Where your data is

• Cloudflare (application hosting, email sending, backup storage): a worldwide network; Cloudflare is certified under the Swiss-U.S. Data Privacy Framework.
• Neon (database): servers in Frankfurt, Germany.
• Sentry (error reports): servers in the European Union (Germany).
• GitHub (Microsoft): weekly database backups pass through its build servers before being stored at Cloudflare.

These providers process data on Meridius Prime's behalf and for nothing else.

Retention

• Account data is kept as long as the account exists.
• Deleting your account immediately erases the account, watches and notifications. They leave the backups after 12 weeks at most.
• The host's technical logs are deleted after a few days.
• Error reports are deleted after 90 days at most.

Your rights

From your account you can download all your data (JSON file), correct it or delete the account. For any other request (access, correction, objection), write to contact@meridiusprime.app. You can also contact the Federal Data Protection and Information Commissioner (FDPIC).