Citrum Privacy Policy

1. Introduction

This Privacy Policy explains how Surf Online processes personal data when you visit Citrum marketing pages (citrum.cc) or sign in to a hosted panel on citrum.app. Citrum is a trade name of Surf Online. Controller: Surf Online.

Citrum does not create a Meridian developer account. Sign-in uses Discord only.

2. Data we collect

When you use Citrum we may collect:

Discord profile fields from OAuth (identify scope): user id, username, avatar.
Guild list from OAuth (guilds scope) to show servers you can manage.
Session cookies needed to keep you signed in to a panel.
HTTP metadata (IP address, user agent) for security and delivery.

3. How we use data

We use this data to authenticate you, display the correct panel for your server, secure the service, and comply with law. We do not sell Citrum visitor data.

4. Bot owner panels

Panel content and any extra data shown inside a panel are controlled by the bot owner. They are responsible for notices and lawful bases required for that content.

5. Subprocessors

We use:

Subprocessor	Purpose	Location	Data processed
Convex	Backend, database, file storage, and real-time API	United States	Account data, bot configurations, variable definitions and stored values, transcripts, platform logs
Vercel	Frontend hosting and edge delivery	Global	HTTP request metadata, session cookies
Discord	Authentication and bot API	United States	OAuth profile fields, bot runtime data
Cloudflare	CDN, edge, and runner traffic	Global	HTTP metadata, cached assets

6. Your rights

You may have rights to access, delete, or object to processing under GDPR and similar laws. Contact legal@meridian.surf. For Meridian developer accounts, see the Meridian Privacy Policy.

7. Contact

legal@meridian.surf