RedMirror Reflection, Privacy Policy

Last updated: August 2026

RedMirror Reflection is operated by Dodo Network Ltd, a company domiciled in Mauritius (“we”, “us”). This policy explains what personal data we collect, why, how long we keep it, and your choices. It is written in plain language and is a starting point, not legal advice.

  Your code never leaves your machine. Reflection is a single offline binary. It reads your source locally and talks only to the model you point it at (which can be a local one). We never receive, store, or process the code you analyse.

What we collect

Account & licence: your email address, used to deliver your licence and, if you opt in, our newsletter. Your licence is issued and managed at license.redmirror.io.
Payments: when you subscribe through PayPal we receive the payment confirmation from PayPal (payer email, amount, subscription id). We never see or store your card numbers.
Licence validation: about once a week the binary makes a short HTTPS call to license.redmirror.io/validate to confirm your subscription is active and refresh a short-lived lease. That request carries your licence token and, as with any web request, your IP address. It does not carry your code, your prompts, or anything about what you scanned.
Website analytics: on our website only, and only after you accept, we use Google Analytics and the Reddit pixel to understand site usage and measure our ads. Nothing is set until you accept the banner.

Cookies & browser storage

On the website, analytics and advertising storage default to denied (Google Consent Mode v2). A banner asks for your choice on your first visit; if you decline, no analytics or advertising cookies are set. If you accept, Google Analytics sets cookies such as _ga, and the Reddit pixel loads to measure our ads. You can revisit the choice by clearing the rm_consent value in your browser storage. The offline binary itself sets no cookies and does no tracking.

Who we share data with

We use a small number of processors to run the service, and we do not sell your personal data:

Cloudflare, Inc. — hosts our website, licence server, and binary distribution, and provides security and email delivery.
PayPal — subscription payments.
Google LLC (Google Analytics) and Reddit, Inc. — website analytics and ad measurement, only after you accept.

We may also disclose data where required by law.

Where your data is stored

Your account, licence and billing records are stored on Cloudflare and PayPal infrastructure. These global providers may process data in more than one country.

How long we keep it

Account & licence records: kept while your subscription is active and for as long as needed for accounting and legal purposes.
Newsletter email: kept until you unsubscribe.

Your rights

Depending on where you live (for example under the EU/UK GDPR or California’s CCPA/CPRA), you may have the right to access, correct, delete, export or object to the processing of your personal data. To exercise any of these, or to close your account and delete the associated data, email us at support@devs.mu. We do not sell personal data.

Security

We use encryption in transit (TLS) and keep the credentials that matter on our servers, never in your browser. No method of storage or transmission is perfectly secure, and the service is provided “as is” — see our Terms.

Children

RedMirror Reflection is not directed to children and is intended for users aged 18 or over.

Changes

We may update this policy; we will change the date above when we do. Continued use after a change means you accept the updated policy.

Contact

Dodo Network Ltd, Mauritius · support@devs.mu