Mirrorlane Privacy Policy

This Privacy Policy explains what information Mirrorlane handles when you use the website at mirrorlane.io, the trading terminal at app.mirrorlane.io, and the documentation at docs.mirrorlane.io (together, the “Service”), and what it does not.

In this policy, “Mirrorlane,” “we,” “us,” and “our” refer to the Service and the people operating it, and “you” means a person who uses it.

1. What Mirrorlane Handles

1.1 No Mirrorlane account

To use Mirrorlane you connect a wallet and use a Lighter account. We do not collect names, email addresses, phone numbers, or identity documents. Mirrorlane knows you by your wallet address and your Lighter account.

1.2 Your trading key

Mirrorlane creates a trading key for your Lighter account in your browser, and you register it with your wallet’s signature. The key stays in your browser: with Remember me on, it is stored on that device, encrypted; with Remember me off, it is kept only for the session. It is never sent to Mirrorlane’s servers or to anyone else. Your browser uses it to sign the actions you take and to make the short-lived access tokens Lighter asks for before it returns your account’s orders and history.

Mirrorlane never asks for your seed phrase or your wallet’s private key.

1.3 What goes straight to Lighter

Your orders, your account data, and the market data you view travel directly between your browser and Lighter’s API and explorer. Lighter receives your IP address and the details of each request, under its own terms and policies. Your browser also loads token logos from Lighter’s asset server, and when it follows a fast withdrawal, it reads the public Arbitrum network through Arbitrum’s public node. To show the names traders have set in ENS, it asks a public Ethereum node, which receives your IP address and the addresses it looks up.

Activity on Lighter is public: anyone can read an account’s trades, positions, and balances through Lighter’s public API and explorer.

1.4 Deposits through our deposit service

When you ask for a deposit address, a deposit quote, or a deposit’s status, your browser sends Mirrorlane’s deposit service your wallet address and, where needed, your Lighter account number and the network, token, and amount. The service passes them to Lighter’s deposit bridge, which works with Fun.xyz, and returns the address, quote, or status to your browser. It stores none of this. To prevent abuse, it counts requests from each network address and each wallet, in memory, for one minute.

1.5 Trading totals from Lighter

Lighter’s partner program lets us see the trades placed through Mirrorlane, with the Lighter account each came from. We use only totals from it, such as trading volume, fees, and the number of accounts trading through Mirrorlane.

1.6 Technical information

Our hosting and content delivery providers receive your IP address, your browser’s details, and the pages and files you request, in order to deliver the Service and keep it secure. They keep request logs for a limited time under their own policies: up to 90 days for the host of our deposit service. They also read your country from your IP address so that Mirrorlane can apply Lighter’s regional restrictions, and store that country code in one cookie.

We use no analytics, advertising, session-recording, or error-reporting services, and we set no tracking cookies.

1.7 What stays on your device

Mirrorlane keeps these in your browser’s storage, on your device only: your preferences and layouts; your alerts and order hotkeys; your trading key, encrypted, when Remember me is on; a copy of your account’s history for portfolio analytics; the state of your strategies; the images you add to share cards; the version of the Terms of Use you agreed to; copies of market data it has read, so pages load faster; and small lists, such as your recent deposit networks and the notices you dismissed. None of it is sent to us.

Logging out stops your strategies, clears that account’s saved history, and ends the session; a remembered key stays, encrypted, so you can reconnect without new signatures. Revoking the key in Mirrorlane’s API keys removes it from your device for good. Clearing your browser’s data for Mirrorlane removes everything.

1.8 Messages you send us

If you contact us on X or by email, we receive your message and your handle or address, and use them to reply.

2. How We Use Information

We use information to:

• Give you deposit addresses, quotes, and deposit status.
• Apply Lighter’s regional restrictions.
• Deliver the Service, keep it secure, and prevent abuse.
• Understand how much trading goes through Mirrorlane, from Lighter’s totals.
• Answer your messages.
• Comply with the law and enforce our Terms of Use.

Where the law requires a legal basis, we rely on what is needed to provide the Service you ask for, our legitimate interest in keeping it secure and understanding its use, and our legal obligations.

3. Who Receives Information

• Lighter receives what your browser sends it directly (section 1.3).
• Lighter’s deposit bridge and Fun.xyz receive the deposit details in section 1.4.
• Arbitrum’s public node, a public Ethereum node, and Lighter’s asset server receive the requests your browser makes to them (section 1.3).
• Our hosting and content delivery providers process the technical information in section 1.6 for us.
• Authorities or others, where the law requires it, or where it is needed to investigate unlawful activity or protect the Service and its users.
• A successor, if the Service is reorganized or transferred, under protections at least as strong as these.

We do not sell or rent information, and we do not share it for advertising.

4. Public Blockchain and Lighter Data

Wallet addresses, blockchain transactions, and activity on Lighter can be public, traceable, and linkable over time. Mirrorlane’s leaderboard and trader profiles show this public activity, with the name a wallet has set in ENS, if any. We cannot remove or change information on a public blockchain or on Lighter. Logging out of Mirrorlane does not delete those records.

5. Security

Your trading key never leaves your browser and is stored encrypted when it is remembered. Mirrorlane’s pages load scripts only from Mirrorlane and connect only to Lighter, our deposit service, Arbitrum’s public node, and a public Ethereum node for ENS names.

No website, device, or network is completely secure, and we cannot promise absolute security. Keep your device, browser, and wallet secure. If you think a key is exposed, revoke it in Mirrorlane’s API keys or in Lighter’s app, and tell us.

6. How Long We Keep Information

• Deposit service: nothing is kept, apart from the one-minute request counts.
• Hosting and delivery logs: under the providers’ own policies, up to 90 days for our deposit service’s host.
• Messages: as long as needed to deal with them and to keep a record of the exchange.
• Your device’s data: until you delete it.

Lighter, wallet providers, and public networks keep their own records under their own policies.

7. Your Choices and Rights

Most information about your use of Mirrorlane stays in your control: you can clear Mirrorlane’s data in your browser, revoke your trading key, or stop using the Service. There is no Mirrorlane account to delete.

Depending on where you live, you may have rights to access, correct, or delete personal information we hold, to object to or restrict its processing, to withdraw consent where we rely on it, and to complain to a data protection authority. To make a request, contact us as described in section 12. We may need to verify a request before acting on it.

8. International Processing

Mirrorlane and its service providers may process information in countries other than yours, which may have different data protection laws. Where applicable law requires safeguards for international transfers, we take the steps it requires.

9. Children

The Service is not intended for anyone under 18, or below the age of legal majority where they live. We do not knowingly collect personal information from children. If we learn that we have, we will take reasonable steps to delete it.

10. Third-Party Services

Mirrorlane works with services it does not control, including Lighter, your wallet provider, Lighter’s deposit bridge and Fun.xyz, and X when you share a card or contact us there. They have their own terms, privacy policies, and data practices. Review them before you connect an account or use them.

11. Changes to This Policy

We may update this policy to reflect changes to the Service, our practices, or the law. We will change the “Last updated” date when we do, and give more notice, or ask for consent, where applicable law requires it.

12. Contact

For questions about this policy, privacy requests, or security reports, contact us on X at x.com/mirrorlaneHQ or by email.

Email: support@mirrorlane.io