Your data. Clear rules.

Data controller

The controller of your personal data is Patryk Kleczko, operating under the mirROR brand.

Privacy contact: contact@expmirror.com.

Data we process

The waitlist stores your normalized email address, landing language, fixed source identifier, consent-version identifier, and signup timestamp.

The waitlist table does not intentionally store your IP address, advertising identifiers, or a behavioural profile. Infrastructure providers may process technical data required to provide their services under their applicable terms and data-processing agreements.

Purpose and legal basis

We use the data only to register you on the waitlist and notify you when first access to mirROR becomes available.

The legal basis is your consent under Article 6(1)(a) GDPR.

Infrastructure providers

We use Supabase Pte. Ltd. for database infrastructure. The database project is configured in the Frankfurt region.

We use Vercel Inc. on the Pro plan for hosting and application runtime infrastructure for expmirror.com.

We currently do not use a third-party email delivery provider for waitlist messages. Before the first availability message is sent, this notice will be updated if such a provider is added.

Transfers outside the EEA

Although the database project uses a European region, we do not claim that all processing takes place exclusively within the EEA.

Supabase and Vercel may use infrastructure or subprocessors outside the EEA. Their current data-processing agreements provide transfer safeguards for relevant transfers, including Standard Contractual Clauses where applicable.

Retention

We retain your waitlist data until the first-access availability notification is sent or until you withdraw consent earlier.

After the purpose ends or consent is withdrawn, the waitlist record will be deleted within a maximum of 30 days unless limited data must be retained longer under a separate legal obligation.

Withdrawal and your rights

You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

If you joined the waitlist in this browser and it still holds the technical withdrawal token, you can use the mechanism below to withdraw consent and remove the record immediately. For older signups, another device, or after clearing browser data, contact us at contact@expmirror.com.

Where provided by the GDPR, you may request access, rectification, erasure, restriction of processing, and data portability.

Complaint to a supervisory authority

You have the right to lodge a complaint with the competent supervisory authority. In Poland, this is the President of the Personal Data Protection Office (Prezes UODO).

Voluntary provision

Providing an email address is voluntary. Without it, you cannot join the waitlist or receive the mirROR availability notification.

Profiling and automated decisions

The waitlist is not used for profiling, and we do not make solely automated decisions based on it that produce legal or similarly significant effects on you.