Legal policies

Privacy policy

What Mirror stores about you, why it stores it and who can see it.

Last updated: 24 September 2026

Information we collect

Account data: your email address, your sign-in method and a unique identifier from your sign-in provider.

Financial data: your Demo and Live balances, deposit and withdrawal records, the wallet address you send or receive USDC with, and the transaction hash of each transfer.

Trading data: every round you enter, including the asset, direction, stake, entry price, exit price, result and the timestamps.

Technical data: basic device and browser information used to keep the service running and to detect abuse.

Why we use it

To run your account, credit deposits, settle rounds and pay withdrawals. To show your own history, statistics and badges. To detect abuse such as duplicate accounts or automated play. To reach you when something affects your funds.

We do not sell personal data and we do not run advertising trackers.

Public blockchain activity

Deposits and withdrawals happen on public chains. Transfers from or to a Mirror wallet are visible to anyone who looks at that address. This is a property of the network, not a Mirror setting. Use an address you are comfortable being associated with Mirror.

Public feeds

The community activity stream and the trading floor only show anonymous handles such as trader_3fa1. Emails, wallet addresses and account identifiers are never shown to other users.

Who we share it with

Our hosting, database and authentication providers, who process data only to run the platform. Our market data provider, which receives no personal data, only requests for prices. Authorities, where the law requires it.

How long we keep it

Trading and payment records are kept while your account exists and afterwards where financial record keeping rules require it. Marketing style preferences are kept until you withdraw them.

Your rights

You can ask for a copy of your data, ask for corrections, or ask for deletion by emailing support@mirrorterminal.com from your account email. Deletion requests are honoured except where a record must legally be retained.

Security

Access is protected by authentication and row level permissions, so an account can only read its own data. Payment signing keys are held in the platform secret store and are never exposed to the app. No system is perfect: tell us immediately at support@mirrorterminal.com if you believe your account is compromised.

Other policies

Questions

Write to support@mirrorterminal.com and a person on the Mirror team will answer. Include your account email and, for payment questions, the transaction hash.