This policy explains how Megs handles personal data and cookies on this website (megs.media), on the Magento Speed Scanner waitlist and in Megs apps, including MoveSigned. We collect as little as we can, and we never sell personal data.
Who is responsible
The data controller is Mestereaga Consortio P & C SRL, Rapoltu Mare nr. 288, Hunedoara County, Romania, VAT/CUI RO37675295, Trade Register no. J20/803/30.05.2017. Megs is a brand of this company. Contact: contact@megs.media.
This website
Visiting the site. Your browser sends technical data such as your IP address, browser type and the page requested. Our hosting provider, Cloudflare, uses it to deliver the site and protect it from abuse. Legal basis: our legitimate interest in running a secure website (Art. 6(1)(f) GDPR).
Analytics and marketing, only with your consent. If you click “Sure, go ahead” in the cookie banner, the site loads Google Analytics 4 and Hotjar (through Google Tag Manager), the Meta Pixel and MailerLite's website script. They record the pages you visit, how you got here, your device and browser, an approximate location derived from your IP address, how you use the page (Hotjar may record clicks, scrolling and mouse movement, but not what you type into forms), and whether you click the email link or join the waitlist. MailerLite may also show sign-up popups. We use this to understand visits, improve the site, and measure and target ads on Meta (Facebook, Instagram). Legal basis: your consent (Art. 6(1)(a) GDPR). If you click “No thanks” or ignore the banner, none of these tools is loaded. Our fonts are served from our own domain.
Emailing us. If you write to contact@megs.media, we use your email address and what you send us to reply and to provide support. Legal basis: providing the service you ask for, or our legitimate interest in answering you (Art. 6(1)(b) and (f) GDPR).
Cookies
Your cookie choice is stored in your browser's local storage, so the banner doesn't appear on every visit. That's strictly necessary and contains no personal data. If you accept, these cookies may be set:
_ga, _ga_* (Google Analytics): distinguish visitors and sessions. Kept for up to 2 years.
_hj* and _cs_* cookies (Hotjar, part of Contentsquare): recognise a visitor and session. Kept for up to 13 months.
_fbp, _fbc (Meta): identify browsers for ad measurement. Kept for up to 90 days.
MailerLite cookies: remember whether a popup was shown or closed. Kept for up to 1 year.
You can change your choice at any time with , also linked in the footer. Rejecting after you have accepted removes these cookies from this site. Google, Meta and Hotjar also offer their own controls: Google ad settings, Meta ad settings, Hotjar opt-out.
Magento Speed Scanner waitlist
If you join the waitlist on megs.media/magento, we store your email address, the date you signed up, where you signed up and the fact that you gave consent. We use it only to email you when the scanner launches.
Legal basis: your consent (Art. 6(1)(a) GDPR), given by submitting the form, which states that you will get the launch email. You can withdraw it at any time.
Spam protection: the form uses Cloudflare Turnstile, which checks signals from your browser and IP address to tell people from bots. It doesn't set advertising cookies.
Where it is stored: in a Cloudflare D1 database, with a copy in our email service, MailerLite, which sends the launch email.
How long: until you unsubscribe or ask us to delete it. If the scanner doesn't launch, we delete the list within 12 months of collecting it.
Unsubscribe: use the link in any email, or write to contact@megs.media.
Magento Speed Scanner, once it launches
The scanner analyses public web pages. When someone scans a store, we process the URL entered, the public pages and assets any browser can see, the response headers and performance data from Google PageSpeed Insights. We store the scan results and show them on a public report page for that domain. Scans are rate-limited by IP address to prevent abuse. Store owners can ask us to remove a report by writing to contact@megs.media. We'll update this section with full details before the scanner launches.
Megs apps (including MoveSigned)
When you use a Megs app, we process the data needed to provide it:
Account data: name, email address, company name and login details.
Content you create: inventories, condition photos, customer names and signatures, and the documents (such as PDFs) generated from them. Your customers' data is entered by you, and we process it on your behalf to provide the app.
Payment data: subscriptions are handled by Stripe or by the app store you buy through. We don't see or store full card numbers.
Technical data: device type, app version and error logs, used to keep the app working.
Purpose and legal basis: providing the app under our agreement with you (Art. 6(1)(b) GDPR), and our legitimate interest in keeping it secure and reliable (Art. 6(1)(f)).
Storage: app data is stored with [TO CONFIRM: MoveSigned hosting / database / file storage provider and region].
Retention and deletion: we keep your data while your account is active. You can delete your account at any time, as described on our contact page. We then delete your account data and the content you created within 30 days, except where the law requires us to keep it longer, for example invoices for accounting.
Each app may also show a short privacy summary in the app stores. If an app processes data in a way not described here, its own notice will say so.
MailerLite: waitlist email list, the launch email and website popups (popups only with consent).
Google Ireland Ltd / Google LLC: Google Tag Manager and Google Analytics 4 (only with consent).
Hotjar Ltd: visit analytics and heatmaps (only with consent).
Meta Platforms Ireland Ltd: Meta Pixel for ad measurement (only with consent).
Zoho Corporation: email hosting for contact@megs.media.
Stripe: payments for Megs products.
Google: PageSpeed Insights, used by the Magento Speed Scanner once it launches.
Anthropic: AI diagnosis in the Magento Speed Scanner once it launches. It receives structured scan results, not personal data.
[TO CONFIRM: processors used by MoveSigned, e.g. hosting, storage, error tracking, email delivery]
Some of these providers may process data outside the European Economic Area, for example in the United States. Where that happens, transfers rely on the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
Your rights
Under the GDPR you can ask for access to your personal data, and for its correction, deletion or transfer. You can also restrict how it is used, or object to processing based on legitimate interest. Where processing is based on consent, you can withdraw consent at any time; this doesn't affect what we did before. To use any of these rights, email contact@megs.media. We reply within one month.
You also have the right to complain to a data protection authority. In Romania, that is the National Supervisory Authority for Personal Data Processing (ANSPDCP), dataprotection.ro.
Children
Megs products are for businesses and aren't directed at children under 16.
Changes
We'll update this page when what we collect changes, along with the date at the top.