Privacy Policy

Secure & Private by Design: Your photos are protected by multi-layer access controls, encrypted connections, and isolated data storage. Your galleries and albums are secured with row-level security policies that ensure only you—and those you explicitly share with—can access your content. All data transfers are encrypted using industry-standard SSL/TLS. We also implement role-based access controls, audit logging, and rate limiting to protect your account.

Secure Storage: We use industry-standard security measures to protect your data, including encrypted data transmission (SSL/TLS), secure data centers, and regular security audits.

Data Retention: We retain your information for as long as your account is active or as needed to provide you services. You may request deletion of your data at any time through your account settings.

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• With Your Consent: When you choose to make galleries public or share content with specific individuals
• Service Providers: With trusted third-party service providers who assist in operating our platform (hosting, CDN, infrastructure), bound by confidentiality agreements
• Legal Requirements: When required by law, court order, or governmental authority
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice provided
• Safety and Security: To protect the rights, property, or safety of Lodgepole I/O, Mirlo, our users, or the public

You have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your account and associated data
• Data Portability: Request a copy of your data in a machine-readable format
• Opt-Out: Unsubscribe from marketing communications at any time
• Object: Object to certain processing of your personal information

To exercise these rights, please contact us at hello@mirlo.photo. We will respond to your request within 30 days.

Our Ad-Free Commitment: Mirlo does not use advertising cookies or third-party tracking for behavioral advertising. We are ad-free by design.

Essential Cookies: We use essential cookies required for platform functionality, including:

• Authentication cookies to keep you logged in
• Security cookies to protect against unauthorized access
• Preference cookies to remember your settings

Analytics (Cookieless): We use a privacy-friendly, cookieless analytics provider to understand how people use Mirlo. It sets no cookies and requires no consent banner. It collects only anonymous, aggregate data:

• Pages visited and navigation patterns
• Aggregate feature usage
• Page transitions and referring pages

What We Do NOT Track:

• Input field values (passwords, emails, form content)
• Your photos, captions, or personal content
• Cross-site browsing activity

Analytics data is anonymous, uses no tracking cookies, and is never sold or shared with third parties for advertising.

You can control cookies through your browser settings, but disabling essential cookies may affect platform functionality.

Lodgepole I/O operates globally through Mirlo. Your information may be transferred to and processed in countries other than your own. We ensure that such transfers comply with applicable data protection laws.

For European Union Users: We comply with the General Data Protection Regulation (GDPR) and ensure adequate safeguards for data transfers outside the EU.

For California Residents: We comply with the California Consumer Privacy Act (CCPA) and provide California residents with specific rights regarding their personal information.