Privacy policy

The data controller is Michael Zekri, publisher of mirrorless.io.

Address: 80 rue de Longchamp, 92200 Neuilly-sur-Seine, France.

Contact: contact@mirrorless.io.

mirrorless.io provides a contact form, optional user accounts and limited audience measurement. It does not yet provide payments or an active newsletter.

The contact form collects the data strictly necessary to process a request: name, email address, request subject and message. Account authentication uses the email address, a password and a technical Supabase user identifier. The password is handled by Supabase and is not stored by mirrorless.io in readable form. Brevo delivers account confirmation, recovery and security emails. When a signed-in user saves an Expert project, its settings are synchronized with Supabase so they can be retrieved on other devices.

Synchronized Expert projects are private by default. If their owner deliberately creates a public link, a read-only snapshot of the project settings becomes accessible to anyone with that link, without exposing the account email address or identifier. The link can be revoked.

Technical data may also be processed during browsing: anonymized IP address, log data, browser type, pages viewed and information required for security or proper website operation. Matomo measures traffic and viewed pages in an aggregated way without tracking cookies. Preference settings, such as the selected visual palette and the audience-measurement opt-out, may remain in browser local storage.

Data is used to reply to messages, process requests, authenticate and secure accounts, send the required transactional emails, improve and secure the service, and comply with legal obligations.

Data is not sold to third parties.

Depending on the case, processing may be based on the publisher's legitimate interest, performance of a contract or pre-contractual measures, user consent, or compliance with a legal obligation.

Consent will be requested when required by law, especially for non-essential cookies or certain communications.

The required fields in the contact form are limited to the information necessary to process the request.

Any optional fields may help qualify a message or improve the quality of the reply, but they are not required unless clearly indicated.

Data is intended for the website publisher and, where necessary, technical providers involved in operating the service. When enabled, the n8n automation system may receive contact messages to help process them.

The website is hosted by Vercel Inc., uses Supabase for authentication and certain application data, Brevo for transactional account emails, Cloudflare Turnstile for anti-spam checks, and self-hosted Matomo for audience measurement. These providers may process the technical data required for hosting, authentication, email delivery, security and website operation.

Messages and contact requests are retained for the time necessary to process and follow them up.

Account data and synchronized projects are retained for the period required to provide the service. Users can export them or delete their account from the Account page; deletion removes remote projects and their active public links. Future subscription or payment data would be retained according to applicable legal obligations.

Technical data and security logs are retained for limited periods adapted to service security and proper operation. Raw Matomo audience logs are automatically deleted after no more than 730 days.

Under the GDPR and French Data Protection Act, you have the right to access, rectify, erase, restrict, object to processing and, where applicable, port your data.

You can exercise these rights by writing to contact@mirrorless.io.

You may also lodge a complaint with the CNIL if you believe your rights are not respected.

The website uses cookies and local storage necessary for operation, including the account session, the audience-measurement opt-out and certain display preferences.

Matomo is configured without tracking cookies for limited, aggregated audience measurement. You can opt out at any time with the control on this page. If this configuration no longer met the conditions that apply to strictly limited audience measurement, a consent mechanism would be deployed before the relevant collection.

mirrorless.io uses Matomo, a self-hosted audience measurement tool, to understand website traffic in an aggregated way.

This measurement is configured without tracking cookies, with an anonymized IP address and a maximum raw-log retention period of 730 days. Its configuration is reviewed regularly against the conditions that apply to audience measurement.

You can opt out of this audience measurement below. The opt-out choice is stored in your browser.

Some technical providers, including Vercel, may be established outside the European Union.

Where data is transferred outside the European Union, such transfers must be governed by appropriate safeguards, including standard contractual clauses or equivalent mechanisms.

mirrorless.io may use recommendation logic to help visitors compare cameras according to a use case.

This logic is informational and does not produce a legal effect or a similarly significant effect for the user.

This policy may be updated to reflect changes to the website, services or legal obligations.

The version published on this page is the applicable version.