Privacy Policy

Miria Research is operated by «CONTROLLER — registered name or individual», registered at «CONTROLLER — registered address», tax number «CONTROLLER — VAT / tax number» (“we”, “us”).

We are the data controller for the personal data described below. For anything in this policy, write to «PRIVACY CONTACT — email address».

We have not appointed a Data Protection Officer. We are stating that rather than leaving it out, so you know it is a decision and not an omission.

If you do not choose a display name, one is filled in from the part of your email address before the “@”. It is stored, but it is never published: wherever contributions are shown publicly, a name you did not choose is replaced with “Anonymous backer”. Choose a display name and that is what appears instead. Your email address itself is never published.

We do not sell personal data, we do not use it to train models, and we do not use it for advertising or profiling.

Two cookies are set when you load the site:

Our hosting platform runs a first-party analytics script on every page. It records the page you are on, the page you came from, your browser user-agent and language, and the country derived from your IP address, tied to the session-id above. It does not record your name or email address, and it does not follow you to other websites.

It is switched off until you allow it. The first time you visit we ask, and nothing is sent while the question is on screen. If you decline, the analytics is blocked before it can send anything and the session-id cookie is deleted. If you allow it and change your mind, clear this site’s data in your browser and you will be asked again.

Your sign-in session is kept in your browser’s local storage rather than in a cookie, so it is not affected by that choice — clearing your site data signs you out.

Card payments are handled entirely by Stripe on pages hosted by Stripe. Your card number never reaches our servers, and we have no way to retrieve it.

When you start a purchase we send Stripe exactly three things: an identifier for your account, an identifier for you as the acting user, and the number of credits being bought. No email address, no name. Stripe tells us afterwards whether the payment succeeded; we record that result, the number of credits, and Stripe’s own event identifier.

Stripe is an independent controller for the payment data you give it. Its handling of that data is governed by Stripe’s own privacy policy.

Your account, your credit balance and everything you commission are stored in the European Union: the database in Paris, the API in Belgium.

Two things leave the EU. Stripe processes payments partly outside the EU under its standard contractual clauses. And because the site loads its typefaces from Google Fonts, your IP address is sent to Google on each page load — including if you never sign in. We are aware this can be avoided by serving the fonts ourselves, and it is on our list.

Your account details are kept for as long as your account exists. Records of payments and of credits issued or spent are kept for as long as accounting and tax law requires, even after an account is closed, because they are financial records rather than profile data.

Sign-in session records are kept by our authentication provider and expire on their own. Analytics records are retained by our hosting platform under its own schedule.

Under the GDPR you can ask us for a copy of your data, to correct it, to delete it, to receive it in a portable form, to restrict how we use it, and to object to processing we base on legitimate interest.

There is currently no button for this. We are telling you plainly rather than implying a self-service control that does not exist. Write to «PRIVACY CONTACT — email address» and a person will do it by hand. We will respond within 30 days.

Deleting your account removes your account details. Financial records are retained as described in section 8, and any research already published stays published — it is not personal data and other people rely on it.

If you think we have handled your data badly, you can complain to your national data protection authority.

This service is for adults. It is not directed at children, and we do not knowingly hold data about anyone under 18.

When we change what we collect, we change this page and move the date at the top. If a change is significant we will tell account holders by email rather than relying on you to notice.

«PRIVACY CONTACT — email address», or by post to «CONTROLLER — registered address».

See also our Terms of Service.