Draft. These pages are published for reference and have not been reviewed by counsel. They predate the current freemium offering and mix English and French. Do not rely on them as the operative agreement.

Privacy Policy

1. Data controller

MirrorWhales, entreprise individuelle.
1 rue Marguerin, 75014 Paris, France.
SIREN 109 241 851, SIRET 109 241 851 00012.
Contact: contact@mirrorwhales.com, phone 09 77 60 15 47.
Full publisher identification is in the mentions légales.

2. DPO

No Data Protection Officer designated — the Art. 37 GDPR threshold is not met (solo operator, no large-scale processing, no systematic monitoring of data subjects).

3. Data we collect

  • Account data: email, argon2id-hashed password, role.
  • Session data: session token, pseudonymised IP (HMAC-SHA256), user-agent fingerprint, timestamps.
  • Audit events: login attempts, MFA actions, password changes, session revocations, data-export requests.

4. Purposes & legal basis (GDPR Art. 6)

  • Service delivery & account management — contractual necessity.
  • Abuse prevention & security — legitimate interest; IP addresses are pseudonymised immediately.
  • Legal obligations — compliance where applicable.

5. Retention

  • Account data: until account deletion + 30 days soft-delete window.
  • Audit logs: 12 months, then deleted.
  • Pseudonymised IP hashes: 90 days.

6. Your rights (GDPR Art. 12–22)

Access, rectification, erasure, restriction of processing, portability, and objection. Request via contact@mirrorwhales.com. A response will be provided within one month. You may also lodge a complaint with the CNIL (www.cnil.fr).

7. Sub-processors

  • OVH SAS — hosting (EU, France).
  • Resend — transactional email (EU/US under Standard Contractual Clauses).

8. Cookies and audience measurement

Strictly-necessary cookies. A session cookie is set for authentication. It cannot be refused without making the service unusable, and requires no consent.

Audience measurement. The site uses Umami, a self-hosted, cookieless audience-measurement tool, loaded from analytics.mirrorwhales.com. It produces aggregate traffic statistics for the editor alone. No advertising and no third-party advertising trackers are used, and no non-essential cookie is set.

Last updated: 2026-09-01.