LAST UPDATED · JULY 2026
Privacy Policy
The short version
Your work lives in your own browser, not on our servers: your projects, footage and creations never leave your device unless you generate. If you create an account, we hold the little that an account needs: your email, your credit balance, and the history of what was added or spent. What leaves your device to generate is what is strictly needed: your prompts and images travel to our AI processing partners, then come back to you.
What stays on your device
Your timeline, imported footage, key frames, gallery (My Creations), assistant chat history and preferences are saved in your browser's local storage (IndexedDB and localStorage). Clearing your browsing data for miragelab.app erases all of it; we cannot recover it, because we never had it. Your creations are not uploaded to us and we do not look at them; the one exception is if you choose to mint one on-chain, described below.
Your account
If you create an account, Supabase hosts it for us: your email address, your name, the sign-in method you chose (email and password, or Google), your plan, your credit balance and a ledger line for every grant and every spend. If you use a password, Supabase stores only a salted hash of it, never the password itself, and we never see it. That ledger is what lets us show an honest balance and settle a billing question; we cannot read your creations from it, only that credits moved. Ask us at contact@miragelab.app and we delete the account and everything on it.
Payments
If you buy credits or a plan, Stripe processes the payment for us. Your card number never reaches our servers: we never see it, never store it. Stripe sends us back only what we need to credit the right account and answer a billing question: a customer reference, the transaction, and the plan status. Stripe processes your payment and billing details under its own privacy policy.
What leaves your device
When you generate, your prompt (and, for video, your key frame image) is sent to fal.ai, which runs the image and video models (FLUX, Kling). When you talk to MIRA, your messages and a snapshot of your lab context are sent to OpenRouter, which runs the assistant model. These partners process the data to produce your result, under their own privacy policies. Avoid putting personal or sensitive information in prompts.
When you mint on-chain
Minting is optional, and nothing leaves your device until you ask for it. When you mint a creation through the Export Gateway, that image or video is uploaded to IPFS through our pinning partner (Pinata) so the network can serve it, and a record is written to the blockchain you choose (Ethereum or Monad) from your own wallet. Treat both as public and permanent: anything you mint can be viewed and copied by anyone, your wallet address is part of that public record, and neither the file on IPFS nor the entry on-chain can be edited or taken back, by us or by you. Only mint work you are happy to publish forever.
Technical data
Our hosting provider (Vercel) may process IP addresses in standard server logs for security. We may use daily counters keyed to your IP address to enforce fair-use limits. We run no advertising trackers and no analytics cookies.
Your choices
You can erase everything locally at any time by clearing site data for miragelab.app in your browser. If you have an account, you can ask us for a copy of what it holds, ask us to correct it, or ask us to delete it outright. One email to contact@miragelab.app is enough; there is no form and no retention department to get past.
Changes
MirageLab is in active development. If a change means your data starts living somewhere new, this page is updated before that change ships, not after.