How Mirror handles your data
Plain language, no legal fog. Updated July 2026 (alpha).
Who Mirror is for (14+)
Mirror is for people 14 and older. Privacy laws that protect younger people — like COPPA in the United States and Quebec's Law 25 in Canada — set special consent rules that a small experiment like ours can't properly support, so we're not able to serve anyone under 14. We don't ask everyone for ID: if a conversation suggests someone may be under 14, Mirror asks them to confirm their age. If they can't confirm being 14 or older, we stop the session kindly — it's the law that binds us, not anything they did — and we delete everything they shared: answers, portrait, chats, all of it.
What Mirror collects
- Your answers and conversations — the text you type, the choices you tap, the media you pick, and anything you say when you talk with Mirror. This is the whole point: Mirror builds its read of you from it.
- The working notes ("dossier") Mirror writes about you — its evolving, hypothesis-style understanding, and your portrait.
- Technical events — timings, taps on Mirror's own surfaces, coarse location (country/region/city — never your precise location), and a first-party cookie so we can tell returning visitors from new ones. We do not store your IP address (only a one-way hash), and there are no third-party trackers or ad pixels on this site.
Who processes it
Your answers are sent to Anthropic (the AI provider whose models power Mirror) to generate questions and your portrait, and stored on Google Cloud where Mirror runs. Nothing is sold, shared with advertisers, or used to train anyone's models. During this alpha, the developer reviews session logs to improve Mirror — that means a human may read what you wrote.
How long it's kept, and how to delete it
Starting a new portrait requires signing in with Google or Apple (since July 21, 2026) — that's what makes your portrait yours: reachable from any device, and never lost to a cleared browser. Invited testers may instead create an email + password account; for those accounts we store the email address and a salted hash of the password (never the password itself), deleted with everything else by "Delete my data".
- Your portrait, dossier, and chats are kept until you delete them — signing in means they wait for you, however long you're away.
- Sessions from before July 21, 2026 — when Mirror allowed anonymous use — follow the old rule: kept for 90 days after their last activity, then deleted automatically (unless they were signed in, in which case they're kept like any other).
- Diagnostic logs are kept up to a year, then deleted.
- Delete it yourself any time: your portrait page has a "Delete my data" button that permanently removes your session, dossier, chats, and sign-in link on the spot.
What Mirror is not
Mirror is a self-reflection tool, not a medical or mental-health service. It never diagnoses, and nothing it says is medical advice.
This is an experiment
Mirror is in an early, experimental phase, offered free and as is, without warranties of any kind. Features may change, break, or be discontinued at any time. If Mirror shuts down, stored data is deleted — the retention promises above are the ceiling, not just the floor. What Mirror says about you is a machine-generated reflection to explore, not a verdict to rely on.