What is kept on your device.

On your first visit you see a card at the bottom left with two buttons: “Accept” and “Change”. Until you choose something, we measure nothing and nobody sets a cookie. One script is loaded in advance: Google’s tag manager (Tag Manager), with every consent set to “denied” — it waits.

Behind “Change” are two switches, both off. Analytics turns on one service that measures which steps people take on the site. Marketingturns on two: one that keeps visitor statistics and makes it possible to show MiraTells adverts on other sites, and an advertising pixel from TikTok. Turning nothing on and saving is refusing, and that can also be done with one button. “Accept” turns on both.

What the site needs in order to work — your draft, your sign-in — lives in your browser and not in a cookie, and that needs no consent.

This is what the site keeps locally in your browser (local storage, not cookies: it does not travel with every request to the server). It is strictly necessary for something you asked for yourself, and it is not used to follow you.

The story you are working on

A reference to your draft, so that tomorrow you carry on where you left off. Only an identifier — no names, no photographs.

Your sign-in

If you are signed in, a key that proves it is you. It expires after thirty days; signing out removes it at once.

Your support conversation

An identifier for the conversation in the chat, so that you find your answer again if you refresh the page. The panel has a button to erase the conversation.

How you came in

If you came via a friend’s link, we keep that code, so that you both get the discount that belongs to it when you check out. Only the code, nothing about the friend.

Your cookie choice

Whether you said yes or no, so that we do not ask again on every page.

Your sign-up for post from Mira

That you signed up, so that the bar above the footer stops asking. Your e-mail address is not in it.

You remove all of this by clearing this site’s data in your browser. You do then lose the draft you were working on.

Mixpanel measures which steps people take: which screen of the story maker they open, where they drop out, whether they look at an example. That is how we see where it goes wrong.

What does not go into it: names, photographs, memories, free text, and anything about a child. The list of what may be measured is fixed in the code and it is short. We do not send your IP address along. Mixpanel does not automatically record clicks or form fields.

Mixpanel does make a recording of how you use the site: which screens you see, where you click and scroll. What you type and the photographs you choose are not in it — input fields are masked and the photograph goes straight to storage, not through the page. If you are signed in, the recording is linked to your account by an internal number, not by your e-mail address.

The data goes to Mixpanel servers in the European Union. Mixpanel keeps its identifier in your browser in local storage, not in a cookie.

Google Analytics keeps visitor statistics: which pages are viewed, and the same short list of events as above. It sets cookies starting with _ga for that; those stay for up to two years.

This is more than counting. We have Google’s advertising signals switched on, and with those Google can use this data to show MiraTells adverts on other sites you visit, and to link them to your Google account if you have allowed personalised advertising there. That is why we call this a marketing cookie and not an analytics one, and why it is only on after your yes.

Google Tag Manager is where we manage measurement and advertising tags; Google Analytics and the TikTok pixel below are loaded through it. The script itself loads on every page, but with every consent set to “denied” (Consent Mode): what is in it does nothing and sets no cookie until you say yes. If you say yes, we pass that on and the tags receive the same events as above — never more than the short list fixed in the code.

TikTok sets an advertising pixel that measures whether a MiraTells advert on TikTok led to a visit or an order. It sees which pages you view and four moments: that you start a story, that you go to check out, that you have paid (with the amount) and that you sign up for post from Mira. No more than that — not which choices you make in the story maker, and no name or e-mail address. TikTok sets cookies starting with _tt for this and also processes the data outside the European Union; see TikTok’s privacy policy.

Google also processes this data outside the European Union. How Google handles data is set out in Google’s own policy; what we do with it is in our privacy policy.

Withdrawing should be as easy as giving. If you say no here after an earlier yes, we stop measuring at once and send nothing more to Google or TikTok. The cookies that are already there (_ga, _tt) we do not remove from here — a website cannot do that for another party — but they are no longer read or added to. You remove them through your browser’s cookie settings.

At checkout you go to our payment provider’s environment. Whatever cookies are used there fall under that party’s policy — we do not see your payment details.

If a service is added or dropped, it will be here, with the date at the top. Questions? Write to [email protected].