Last updated: October 10, 2026. This policy describes how MiaCam LTD handles information when you use MiaCam.
Information handled
Supabase Auth processes account identifiers, email addresses, and authentication/session data. The app stores your profile settings, adults-only confirmation state, companion prompts and chat history, generated reactions, and related account/credit records to operate the service. Custom avatar images, image-to-video source images, and generated media are stored in private Supabase Storage and used to provide the requested features.
For regional access decisions, the server reads country and (where available) state/region metadata from the configured hosting edge. Region is used for the request-time compliance decision and structured policy logs; MiaCam does not currently save a location profile on your account. Separately, Vercel Web Analytics reports aggregate visitor-location breakdowns as described below. The deployment must be configured to trust only its edge-provided geo headers.
Device, cookies, payments, and logs
The site uses authentication cookies and a short-lived preview cookie. Requests necessarily include network and device information used by hosting and security infrastructure. When enabled for guest-preview limits, the server derives a daily HMAC key from trusted proxy IP information rather than storing the raw IP for that limit.
MiaCam uses Vercel Web Analytics for aggregate page-view and visitor statistics, including referrers and broad device, browser, operating-system, and location breakdowns. Vercel describes its visitor identifier as an anonymized daily-reset hash derived from the incoming request; Web Analytics does not use cookies or track visitors across days or websites. Vercel processes this analytics data as our hosting/analytics provider. See Vercel's analytics privacy details.
NOWPayments processes cryptocurrency checkout and payment confirmation. MiaCam does not receive card details through this checkout. Operational logs can include request timing, provider errors, and structured compliance events; explicit prompt text is not included in compliance events.
Retention and rights
Conversation history remains available until you clear the conversation or request deletion. Generated video playback expires after the period shown in the service (currently seven days); an archived file may remain in private storage beyond playback expiry until associated data is cleared or removed. Custom avatar and image-to-video source files are stored privately. Replacing an image updates the active source, but older storage objects may remain until separately cleaned up. Authentication, payment, security, and legal records may be retained as needed to operate the service and meet obligations.
You may request access, correction, deletion, or information about your data by contacting lordzelolox@gmail.com. We will respond as required by applicable law. Service providers such as Supabase, hosting infrastructure, AI/video providers, and NOWPayments process data as needed to provide their services.