Legal
Privacy policy
Last updated 27 October 2026.
The short version
Your photos, facial landmarks and scores never leave your device. The analysis runs in your browser. We store only what an account needs.
Who is responsible
Mirrorline, run by Nils Lilja, Stockholm, Sweden. Contact: hello@mirrorline.site.
What we store, and why
- Account: email, a salted PBKDF2 hash of your password (or your Google or Apple ID email), your onboarding answers (goals, sex, age band, focus areas) and your plan. Purpose: to run your account (contract).
- FaceGPT: when you ask a question, a text summary of your numbers and your question go through our server to the language model. We keep only a daily question count, not the conversation. Purpose: the feature you asked for (contract).
- Payments: handled by Stripe. We store your Stripe customer ID and purchases, never card details. Purpose: billing (contract, legal obligation).
- Waitlist: the email or phone number you give, the plan you picked and optional company or LinkedIn. Purpose: to contact you about Mirrorline (consent).
- Usage ping: one anonymous ping per completed scan with a random install ID, so we can see if people come back. No photo, no score. Turn it off in Settings (legitimate interest).
What we never store
Your photos, your facial landmarks, your measurements or your scores. They live in your browser storage and you can delete them in the app.
Processors
Supabase (database and server functions, EU), Vercel (hosting), Stripe (payments), the language model provider used by FaceGPT (Google Gemini or a public model endpoint), Google and Apple if you sign in with them.
How long
Account data until you delete your account. Waitlist entries until you ask us to remove them or 24 months after the last contact. Purchase records for 7 years (Swedish bookkeeping law).
Your rights
You can ask for a copy of your data, correction or deletion, and object to processing, by emailing hello@mirrorline.site. You can complain to the Swedish Authority for Privacy Protection (IMY).
Age
Mirrorline is for people aged 18 and over.