Privacy Policy

When you download a file through MirrorNest, we record a lightweight, anonymous download event (which version, an approximate country, and the referring page) to understand what's popular. We do not store IP addresses alongside download records.

If you create an account, we store your email address and a securely hashed password (we never store your password itself), plus anything you choose to add — a review, a rating, or software you save to your library.

Our hosting infrastructure keeps short-lived server logs (including IP address) for security purposes — rate-limiting abusive traffic and blocking automated attacks — separate from the account and download data above, and not used to track individual browsing.

We never ask for or store payment or financial information — the service is free.

MirrorNest does not use tracking or advertising cookies. We use a small number of strictly functional cookies: a session cookie to keep you signed in, and (for admins) a session cookie to access the admin panel. Your dark/light theme choice is remembered in your browser's local storage, not a cookie, and never leaves your device. The site has an ad-slot system that isn't active today; if we ever turn on third-party ads, this policy will be updated first to disclose what that network sets before it goes live.

Mirrored files are scanned for malware using our own self-hosted scanner before publishing — files are never sent to a third party for this. Non-mirrored downloads redirect you to the software publisher's own site, which has its own privacy practices we don't control.

Account data is kept for as long as your account exists. Short-lived security logs are rotated automatically and not kept indefinitely. Anonymous download/view statistics are aggregated and not tied to an individual visitor, so they are kept without an expiry.

You can, at any time, by contacting us below:

• Ask what personal data we hold about your account.
• Ask us to correct inaccurate account data.
• Ask us to delete your account and associated data (reviews and library entries are removed with it).
• Ask for a copy of your account data in a portable format.

We respond to these requests within a reasonable time, generally within 30 days.

MirrorNest is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has created an account, contact us and we'll remove it.

We may update this policy as the service evolves; the date at the top of this page reflects the last revision. Material changes affecting how we handle your data will be highlighted here.

Questions about this policy, or a request to exercise any of the rights above, can be sent to [email protected].