MiroMiro 隐私政策

最后更新：October 27, 2026

Introduction

MiroMiro ("we", "our", or "us") is a Chrome browser extension that helps designers and developers capture and download visual assets from websites. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our extension.

Information We Collect

Personal Information

When you use MiroMiro, we may collect the following personal information:

Authentication Information: Email address, name, and profile information obtained through OAuth authentication providers (Google, GitHub, etc.)
Account Data: User ID, authentication tokens (access and refresh tokens), and session data
Usage Metrics: Asset extraction counts, contrast check counts, Lottie extraction counts, and design system extraction counts to enforce usage limits based on your subscription tier

Automatically Collected Information

Web Browsing Data: URLs of websites you visit while the extension is active, used to capture and catalog network resources (images, fonts, videos, stylesheets)
Captured Content: Visual assets (images, SVGs, fonts, videos), color palettes, typography information, and DOM elements that you choose to capture using the extension
Technical Data: Browser type, extension version, and error logs for debugging purposes

Google User Data

If you sign in with Google, we request only your basic profile: your name, email address and profile picture (the openid, email and profile scopes). We use this data only to create your MiroMiro account, sign you in and contact you about your account. We do not access your Gmail, Drive, Calendar or any other Google data, we do not sell it, and we do not use it for advertising or to train AI models.

MiroMiro's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can remove MiroMiro's access at any time from your Google Account permissions, and request deletion of your account data by emailing miromiro.app@gmail.com.

How We Use Your Information

We use the collected information for the following purposes:

Authentication & Account Management: To create and manage your account, maintain your session, and verify your identity
Core Functionality: To enable asset capture, inspector mode, and download features
Usage Limits & Billing: To track your usage against subscription tier limits (Free, Pro, Lifetime) and manage premium features
Service Improvement: To analyze usage patterns, fix bugs, and improve the extension's performance
Customer Support: To respond to your inquiries and provide technical assistance
Legal Compliance: To comply with applicable laws, regulations, and legal processes

Data Storage and Security

Storage Provider: Your data is stored securely using Supabase, a trusted backend-as-a-service provider
Local Storage: Authentication tokens and session data are stored locally in your browser using Chrome's storage API
Security Measures: We implement industry-standard security measures including encryption for data transmission (HTTPS/WSS), secure token storage, and access controls
Data Retention: We retain your personal information for as long as your account is active or as needed to provide you services. You may request deletion of your account at any time

Data Sharing and Disclosure

We do NOT sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

Service Providers: With Supabase (backend infrastructure) to provide core functionality
Legal Requirements: When required by law, court order, or government regulation
Business Transfers: In connection with any merger, sale of company assets, or acquisition (users will be notified)
With Your Consent: When you explicitly authorize us to share specific information

Your Rights and Choices

Depending on your location, you may have the following rights:

General Rights

Access: Request a copy of the personal information we hold about you
Correction: Request correction of inaccurate or incomplete information
Deletion: Request deletion of your account and associated data
Opt-Out: Disable the extension or uninstall it at any time
Data Portability: Request your data in a structured, machine-readable format

How to Exercise Your Rights

To exercise any of these rights, please contact us at miromiro.app@gmail.com. We will respond to your request within 30 days.

GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

Legal Basis for Processing: We process your data based on (1) your consent, (2) contract performance, or (3) legitimate business interests
Right to Object: You may object to processing based on legitimate interests
Right to Lodge a Complaint: You may file a complaint with your local data protection authority
Data Transfers: Your data may be transferred to and processed in countries outside the EEA. We ensure adequate safeguards are in place

CCPA/CPRA Compliance (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

Right to Know: What personal information we collect, use, disclose, and sell
Right to Delete: Request deletion of your personal information
Right to Opt-Out: We do NOT sell your personal information
Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
Shine the Light: Request information about data shared with third parties for their direct marketing purposes

California Privacy Notice: In the past 12 months, we have collected the following categories of personal information: identifiers (email, name, user ID), internet activity (browsing history, captured content), and usage data. We do not sell personal information.

CalOPPA Compliance

In accordance with the California Online Privacy Protection Act (CalOPPA):

We do not track users across third-party websites and therefore do not respond to Do Not Track (DNT) signals
We do not allow third parties to collect personally identifiable information about your online activities across different websites through our site or extension, apart from the consent-based affiliate cookie described under Cookies

Children's Privacy (COPPA)

MiroMiro is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that we have collected information from a child under 13, we will delete it immediately. If you believe we have collected information from a child under 13, please contact us.

Third-Party Services

Our extension integrates with the following third-party services:

Supabase: Backend infrastructure and authentication (Supabase Privacy Policy)
OAuth Providers: Google, GitHub, or other authentication providers you choose to use
Stripe: payments, invoices and subscription management (Stripe Privacy Policy)
Vercel: website hosting and cookieless Web Analytics
Umami: cookieless product analytics
Resend: sending account and product emails
Cloudflare: rendering pages for the API and storing generated previews and screenshots
Endorsely: affiliate referral tracking, only after you consent
AppSumo: licence activation, if you bought MiroMiro through AppSumo

These third parties have their own privacy policies governing their use of your information.

Cookies and Tracking Technologies

We do not use advertising cookies and we do not use Google Analytics. What we do use:

Strictly necessary: sign-in cookies set by Supabase on miromiro.app, and the extension's local storage (chrome.storage API) for your session and preferences. These are needed for the service to work and do not require consent.
Cookieless analytics: Umami (self-hosted) and Vercel Web Analytics count page views and product events without cookies and without building a profile of you across websites.
Affiliate referral cookie (only with your consent): if you arrive through a partner's link, we ask before loading Endorsely, our affiliate platform, which then sets an endorsely_referral cookie so the partner is credited for a purchase. If you decline, nothing is loaded. To change your answer, clear this site's data in your browser.
Checkout: Stripe sets its own cookies on the payment page to process your payment and prevent fraud.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

Updating the "Last Updated" date at the top of this policy
Displaying a notification in the extension (for significant changes)
Sending an email to your registered email address (for material changes)

Your continued use of MiroMiro after changes are posted constitutes your acceptance of the revised Privacy Policy.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from your jurisdiction. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: miromiro.app@gmail.com

Summary of Your Privacy Rights

You have the right to:

Know what data we collect and how we use it
Access your personal information
Correct inaccurate information
Delete your account and data
Opt-out of data collection by uninstalling the extension
Not be discriminated against for exercising your rights

We commit to:

Never sell your personal information
Use your data only for the extension's core functionality
Protect your data with industry-standard security measures
Respect your privacy choices
Be transparent about our data practices

Thank you for trusting MiroMiro with your information.