Privacy policy

1. Who is responsible

Power Forge AI LLC, 5830 E 2nd St, Ste 7000 #34966, Casper, WY 82609, United States. Email: hello@mirrorwell.app. This is the controller in the sense of the GDPR for the processing described here.

2. Representative

We value your privacy and your rights as a data subject and have therefore appointed Prighter Group with its local partners as our privacy representative and your point of contact for the following regions:

• European Union (EU)

Prighter gives you an easy way to exercise your privacy-related rights (e.g. requests to access or erase personal data). If you want to contact us via our representative, Prighter or make use of your data subject rights, please visit the following website: https://app.prighter.com/portal/16103587069

Our representative pursuant to Art. 27 GDPR is Prighter EU Rep GmbH, Schellinggasse 3/10, 1010 Vienna, Austria.

Note on the registered office: Power Forge AI LLC is registered in the U.S. state of Wyoming (Wyoming Secretary of State, Filing ID 2026-001952758). For the processing of personal data of individuals in the EU, a representative pursuant to Art. 27 GDPR has been appointed (address above). A representative for the United Kingdom has not been appointed.

3. What we collect and why

When you use the teaser and ask for your reading, we process:

• Your answers, to generate your first reading and your full reading.
• Your date, time and place of birth, to calculate your Human Design chart and your astrological birth chart. Without them, no chart can be calculated.
• Your email address, to send you a confirmation email (double opt-in) and your reading, and to answer your replies.
• Technical data: the time of your signup, your browser type (user agent), the page you arrived on and, if present, campaign parameters in the link you used (UTM) and the referring site. We use this to understand which channels bring people to Mirrorwell. We do not use cookies or tracking pixels for this.
• If you click the pre-order button, we record that click so we can see how many people were interested. The purchase itself is handled by Stripe (see below).

Legal basis: your consent (Art. 6(1)(a) GDPR) for sending you the reading and the emails, which you give by entering your email and confirming it; and our legitimate interest (Art. 6(1)(f) GDPR) in operating and improving the site and in preventing abuse, for the technical data.

Birth data and your answers are not special categories of personal data in the sense of Art. 9 GDPR, but we treat them as sensitive: they are stored only for the purpose above, never sold, and never used for advertising.

4. Measurement and A/B test, without cookies

We are testing two versions of the teaser against each other, so we can see which one people actually finish. This works as follows:

• When you open the page, your browser draws one of the two versions at random and remembers the result in session storage, together with a random session ID. Session storage is not a cookie: it is cleared when you close the tab, it is not sent to other websites, and it does not identify you.
• In a table called events we store, for each step, only: the random session ID, which version you saw, the name of the step (page opened, teaser started, teaser completed, signed up, pre-order clicked), the time, and the campaign parameters of the link you came from. No IP address, no browser fingerprint, no name, no email address. These rows cannot be traced back to you by us.
• We limit how many of these entries a single session can create per hour, so the table cannot be flooded.
• Which version you saw is also stored with your signup, so we can tell which version produced better signups.
• In addition, Vercel Web Analytics counts page views without cookies and without identifying you.

5. Where your data is stored, and who helps us

We use the following service providers, each bound by a data processing agreement:

• Supabase (database): your signup data and the measurement described above are stored in a database hosted in Frankfurt, Germany (EU).
• Vercel Inc. (hosting): the website is delivered via Vercel's global network. Vercel processes technical connection data such as your IP address to deliver the site. Vercel Web Analytics counts page views without cookies and without identifying you.
• Resend (email delivery): used to send the confirmation email and your reading.
• Stripe (payments): if you pre-order, your payment is processed by Stripe, which acts as the seller of record for the transaction. Stripe is the controller for the payment data you enter there, including the tax and refund handling; see Stripe's privacy policy. We receive confirmation of the payment and the email address you used.
• AI text generation: to write your reading, your chart data and answers (not your email address) are processed by an AI language model provider under a data processing agreement, without the data being used to train their models.
• Prighter (representation pursuant to Art. 27 GDPR): if you contact us through the portal linked above, your request is processed by Prighter on our behalf. The certificate badge shown on this page and on our imprint is loaded from Prighter's servers, which means your IP address is transmitted to Prighter when you open one of those two pages. No other page on this site loads anything from Prighter.

The controller is based in the United States, so your data is processed in a third country within the meaning of the GDPR. Where a provider processes data outside the EU, this is based on the EU standard contractual clauses or an adequacy decision of the European Commission.

6. How long we keep it

• Unconfirmed signups are deleted 30 days after the signup.
• Confirmed signups are kept until you ask us to delete them or until the service is discontinued, at most 24 months after your last interaction.
• The rows in the events table are deleted after 12 months. They contain no personal identifiers.
• Payment records are kept as long as commercial and tax law requires.

7. Your rights

You can ask us at any time for access to your data, to correct it, to delete it, to restrict its processing, to receive it in a portable format, and you can object to processing based on our legitimate interest. You can withdraw your consent at any time with effect for the future; the simplest way is to reply to any email from us with “delete”. You also have the right to lodge a complaint with a data protection supervisory authority. If you are in the EU, you can also exercise these rights through our representative using the portal linked above.

8. No cookies, no profiling for advertising

This site sets no cookies at all and does not build advertising profiles. There is no advertising pixel on this site. Session storage in your browser is used only to remember which link you arrived from, which version of the teaser you saw, and a random session ID, all of which are cleared when you close the tab.

9. Automated content

Your reading is generated with the help of artificial intelligence and is reviewed by a human before it is sent during this first phase. It is intended for reflection and entertainment and has no legal or similarly significant effect on you.

10. Changes

We will update this policy when the service changes. The current version is always at https://mirrorwell.app/privacy.