Privacy policy

1. Who is responsible

Daniel Fischlin, Husmattstrasse 2, 6416 Steinerberg, Switzerland, is responsible for NightScene’s processing of personal information. Privacy requests may be sent to contact@mirrorstate.co.

NightScene is operated from Switzerland and initially serves customers in the United States. Swiss data-protection law applies to the operator, while mandatory privacy rights in a user’s state may also apply.

2. Information we process

• Account information: Clerk user ID, verified email address and, if provided, name or display name.
• Authentication information: passwords, verification codes, sessions and essential authentication cookies are handled by Clerk. NightScene does not store your password in its own database.
• Scene information: the moment, place, detail and mood you enter, the generated or edited title and script, selected language and voice, and the resulting audio file.
• Service information: plan, subscription status, monthly allowance and usage, creation dates, request and job status, and identifiers needed to deliver saved scenes.
• Billing information: Stripe customer and subscription identifiers, payment and subscription status, billing-period dates and transaction references. Full payment-card or bank details are entered directly with Stripe and are not stored by NightScene.
• Technical information: IP address and request, browser or device information may be processed by hosting, security and authentication providers. For eligible US visits with analytics enabled, Google Analytics also receives the limited website-use information described below.
• Messages you send to support, including your email address and the contents of your request.

3. Why we use information

• Create and maintain your account, authenticate you and protect the private studio.
• Generate an editable AI draft, check the final script for safety, create the requested audio and provide your library.
• Process subscriptions, maintain allowances, prevent duplicate charges and provide billing management.
• Respond to support, privacy and account requests.
• Secure, troubleshoot and improve the service, prevent misuse and comply with legal obligations.
• Measure use of the public marketing and legal pages through Google Analytics for eligible US visits, subject to your analytics choice and browser privacy signals.

4. AI scene creation

Your scene details are sent to OpenAI to produce the editable draft. The draft request uses the Responses API setting store: false, so the generated response is not retained for later retrieval through that API. OpenAI’s separate data-use, security and abuse-monitoring terms still apply.

Before audio is created, the final script is sent to OpenAI’s automated moderation service. A flagged script may be blocked. The final script, language and selected voice are then sent to ElevenLabs to create the audio.

Scene fields are free text. Do not include unnecessary health, intimate, financial, government-ID or other highly sensitive information, or personal information about another person without permission.

5. Google Analytics and your choice

NightScene uses Google Analytics 4 on its public marketing and legal pages for visits that our hosting provider identifies as coming from the United States, unless you have turned analytics off or your browser sends a recognized privacy signal. There is no automatic consent popup. The hosting provider’s country information is checked before the Google tag loads. Analytics stays off for other or unknown locations, including Switzerland, Germany and Austria. Location detection is approximate and may reflect a VPN or proxy.

Google Analytics is not used inside the authenticated studio or to send scene text, audio, email addresses or account identifiers to Google. When enabled, it may process page path and title, referring origin or public page, approximate location derived from the IP address, browser and device characteristics, event time, language, screen size, and randomly assigned cookie or device identifiers. Google states that IP addresses are not logged or stored in Google Analytics.

Advertising storage, advertising user data and advertising personalization remain disabled. Google Signals and ad-personalization features are disabled in the NightScene tag configuration. NightScene does not use Analytics for targeted advertising.

Your analytics choice is stored locally in your browser; existing refusals continue to apply. For eligible US visits, analytics cookies such as _ga and _ga_* may be created, expire after up to 60 days and are not extended through activity by NightScene’s tag settings. You can turn analytics off without losing service functionality through “Privacy choices” in the page footer. Turning it off removes NightScene’s analytics cookies from that browser. A recognized Global Privacy Control or Do Not Track signal keeps optional analytics off, even if you previously enabled it. A saved choice to enable analytics does not override the location restriction.

The NightScene Google Analytics property is to be configured for the shortest available user- and event-level retention period, currently two months. Google notes that this setting does not control all aggregated standard reports.

6. Cookies and browser storage

• Essential Clerk cookies and browser storage keep you signed in and protect authenticated requests. They are required for the account service.
• NightScene session storage temporarily keeps your scene inputs, title, script, language and audio-request ID so an unfinished draft survives within the browser tab. It is cleared when you reset the scene or the browser session ends.
• Local storage records your analytics choice so NightScene can respect it on later visits.
• Optional Google Analytics cookies are used only for eligible US visits unless disabled, as described above.

7. Service providers

NightScene shares information only as needed with service providers that help operate the product: Clerk for identity and authentication; Stripe for checkout, subscriptions and billing management; OpenAI for draft generation and moderation; ElevenLabs for text-to-speech; Cloudflare and OpenAI Sites for hosting, database, private audio storage and delivery; and Google for optional analytics.

These providers process information under their own contracts and privacy terms. NightScene does not control every provider’s independent legal retention duties.

8. International processing

NightScene and its providers may process information in Switzerland, the United States, the European Economic Area and other locations where a provider operates. Where required, cross-border transfers are supported by contractual protections, recognized adequacy frameworks or another lawful transfer mechanism. Provider locations and subprocessors may change over time.

9. Retention

• Saved scenes, scripts and audio remain available until you delete the scene or request deletion of the account, subject to limited backup and security-log cycles.
• Account, allowance and subscription records are kept while the account is active and afterwards only as needed for legal, accounting, security or dispute purposes.
• Payment and transaction records may be retained for tax, accounting, fraud-prevention and legal requirements.
• Browser session drafts normally remain only for the life of that browser-tab session or until reset.
• Operational job, checkout and security records are kept only as long as reasonably needed to operate, secure and document the service.
• Analytics retention is described in the Google Analytics section above.

10. Your privacy rights

Depending on where you live, you may have rights to know or access personal information, correct it, request deletion, obtain a portable copy, restrict or object to certain processing, and withdraw consent. You will not be discriminated against for making a valid privacy request.

You can delete individual scenes in your library and turn analytics off through “Privacy choices.” For account access, correction, export or deletion requests, email contact@mirrorstate.co. NightScene may need to verify your identity and may retain information where required by law or needed to complete a transaction, maintain security or resolve a dispute.

Where applicable law provides a response deadline, NightScene aims to respond within 45 days and will explain any permitted extension. If a request is declined, you may reply to the decision to appeal; NightScene will provide the reason and any applicable regulator contact information.

11. No sale or targeted advertising

NightScene does not sell personal information and does not share personal information for cross-context behavioral advertising. It does not knowingly allow third parties to track you across unrelated websites for targeted advertising. Google Analytics is optional, configured without advertising personalization and used only to understand the public website.

12. Age, security and changes

NightScene is not directed to children and is intended for people aged 18 or older. If we learn that a child provided personal information, please contact us so we can review and delete it as appropriate.

NightScene uses access controls, verified authentication, private audio delivery and other reasonable safeguards. No online service can promise absolute security.

This policy may be updated when the service, providers or legal requirements change. The effective date above will be updated, and material changes will be communicated where required.