The retention contract
- Anonymous human observations: live in tab memory and disappear on reload, navigation away, or deletion. They are never attached to an account automatically.
- Saved reflections: remain until you delete them. Only allowlisted environment values and aggregate counts are accepted. Up to 200 sessions per account.
- Machine observations: default retention is 24 hours. Expired rows are immediately excluded from dashboards and removed during periodic traffic-triggered cleanup. A scheduled cleanup handler is also available for hosts with cron support.
- Traffic totals: category and UTC-day counters retain 30 days, with no human session IDs or IPs.
- Rate-limit keys: keyed hashes expire after two minutes. Machine specimen grouping rotates every 30 minutes and is scoped to the current hostname.
What storage mechanisms mean
Cookies are sent automatically with requests. Session storage belongs to a tab. Local storage survives closing the browser. IndexedDB holds structured local records; the Cache API holds responses. Service workers can handle background requests. Storage availability does not mean this site has placed information there.
Who receives information
OpenAI Sites and Cloudflare provide hosting, transport security, authentication and database infrastructure. They process connection metadata and may retain operational logs under their policies. There are no advertising tags, behavioral analytics SDKs or external IP metadata services. Fonts and scripts are served by this site.
Signing in sends identity information through ChatGPT authentication. THE MIRROR receives a site-scoped user identifier and email. This implementation does not receive passwords, retain authentication tokens, record media, or sell visitor telemetry.
The limits of erasure
Deleting a saved reflection removes live application rows and their dependent records. A website cannot erase records held under a hosting provider’s backup or security retention policy, erase network traffic that already occurred, or revoke browser permissions for you. Browser site settings provide the final controls for cookies, local storage and permissions.