Privacy Policy of meshar.io
Last updated: September 1, 2026 - Version: 1.1
Privacy Policy meshar.io - Version 1.1 - September 1, 2026
This policy applies to the meshar.io domain and to the services made available on it.
1. Data Controller
Paolo Tanzi - Partita IVA IT 02611230349 - Traversetolo (PR), Italy. Contact: privacy@lightweb.it
2. Scope of Application
This policy applies to the meshar.io website, a project by lightweb.it, and to the pages currently published on it: Home, Platform, Use cases and Contacts.
It does not apply to the augmented reality applications built with the MeshAR platform. Those are delivered as separate projects, installed on the customer's own devices or distributed through their own channels, and each is governed by the agreement signed with the customer commissioning it and, where applicable, by its own privacy notice. Nothing processed inside those applications passes through this website.
3. Collected Data and Purposes
3.1 Visitor GeoInfo
For all pages on the meshar.io domain, the system automatically records the following data for each visit: IP address; country and approximate geographic area (IP-based geolocation); date and time of the visit; visited page; browser User Agent.
This data is collected and stored exclusively for access monitoring, aggregate traffic analysis and abuse prevention. It is not used to build individual profiles, nor cross-referenced with other sources to identify visitors.
Legal basis: legitimate interest of the controller in the security and correct operation of the site (Art. 6.1.f GDPR).
3.2 Contact Form
The form on the Contacts page collects: name, email address, company name (optional), class of interest (optional) and a free-text message.
The data is stored in a database managed by lightweb.it and simultaneously sent by email to the controller, who is the only recipient. It is used solely to reply to the enquiry and to assess the project described in it. It is not shared with third parties and is not used for unsolicited marketing.
Legal basis: performance of pre-contractual measures at the request of the data subject (Art. 6.1.b GDPR).
Providing name, email address and message is necessary in order to receive a reply; company name and class of interest are optional and their omission has no consequence.
3.3 General Pages
The Home, Platform and Use cases pages require no registration nor do they collect specific personal data, with the exception of the navigation data recorded by the Visitor GeoInfo system described in section 3.1 and, on the Use cases page only, the embedded videos described in section 3.4, which remain blocked until consent is given.
3.4 Embedded Video (YouTube)
The Use cases page embeds demonstration videos hosted on YouTube, a service provided in the EEA by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). The videos are served through the youtube-nocookie.com domain and are loaded in a blocked state: no connection to YouTube or Google is made, and no cookie or similar identifier is set, until the visitor gives explicit consent through the cookie banner or the button shown over each video.
Once consent is given, the visitor's browser connects directly to Google's servers to load and play the video. In this process Google receives the visitor's IP address and information about the browser and the page, and may set cookies or use local storage on the device, in particular when the video is played, both for the operation of the player and for its own statistical and advertising purposes, for which Google acts as an independent data controller. lightweb.it has no access to and no control over this processing.
The consent choice is stored locally in a technical cookie (meshar_cookie_consent) for 12 months. It can be withdrawn at any time by clearing the site cookies in the browser, after which the videos return to the blocked state.
Legal basis: consent of the data subject (Art. 6.1.a GDPR and Art. 5.3 of the ePrivacy Directive). Consent is optional; if it is not given, the rest of the page remains fully usable and only the video does not load.
For information on how Google processes this data, see the Google Privacy Policy at policies.google.com/privacy.
4. Cookies
This site uses exclusively technical cookies that may be necessary for the operation of the session and to store the visitor's cookie-consent choice (meshar_cookie_consent). This site sets no profiling cookies, and no third-party tracking or analytics tools (for example Google Analytics or Google Ads) are installed.
The Use cases page embeds YouTube videos that are blocked by default. YouTube may set its own cookies or use local storage only after the visitor has given explicit consent through the cookie banner, and in particular when a video is played. A consent banner is already in place for this purpose. See section 3.4 for details.
Technical cookies do not require consent under the Provision of the Italian Data Protection Authority and the ePrivacy Directive. Should analytics or profiling tools be introduced in the future, this policy will be updated before their activation.
5. Data Retention
Contact form submissions are retained for a maximum of 24 months from collection, unless a contractual relationship is established that requires longer retention. Deletion may be requested at any time.
Visitor GeoInfo data is retained for the time strictly necessary for the purposes described in section 3.1 and in any case for no longer than 12 months.
The cookie-consent choice (meshar_cookie_consent) is retained for 12 months. Any cookies set by YouTube after consent are governed by Google's own retention policies.
6. International Data Transfers
Within the scope of the services the controller operates directly (Visitor GeoInfo and the contact form), no transfer of personal data outside the European Economic Area (EEA) takes place.
The only possible transfer outside the EEA concerns the embedded YouTube videos on the Use cases page (section 3.4): if the visitor consents and a video is loaded, the connection to Google's servers may involve a transfer of the IP address to Google LLC in the United States. Google carries out such transfers on the basis of the European Commission's Standard Contractual Clauses and its certification under the EU-US Data Privacy Framework. This transfer does not occur if consent is not given.
7. Data Security
All communications between the visitor's browser and the meshar.io servers take place over the HTTPS/TLS protocol.
Visitor GeoInfo data and contact form submissions are stored on third-party hosting infrastructure, processed under a data processing agreement. The controller relies on the hosting provider as an external data processor for storage.
8. Rights of the Data Subject (GDPR)
As a data subject under the GDPR you have the right to: access the personal data held about you; request the rectification of inaccurate data; request the erasure of your data; request the restriction of processing; object to processing based on legitimate interest; withdraw consent given for the embedded video at any time; request the portability of your data (Art. 20 GDPR), where applicable.
To exercise these rights, write to privacy@lightweb.it. We will respond within 30 days.
You also have the right to lodge a complaint with the supervisory authority (Garante per la Protezione dei Dati Personali - gpdp.it).
9. Minors
meshar.io is a site addressed to companies and professionals. No personal data is knowingly collected from minors. Should you believe that a minor has submitted data through the contact form, please report it to privacy@lightweb.it and it will be deleted promptly.
10. Changes to This Policy
This policy may be updated in the event of changes to the services offered or to applicable regulations. The updated version is always available at meshar.io/privacy. Continued use of the site after the publication of changes constitutes acceptance of the same.
11. Contact
For any question regarding this policy: Paolo Tanzi - privacy@lightweb.it - Partita IVA IT 02611230349. meshar.io Privacy Policy v1.1