Mivaldi Platform Privacy Policy
1. Data Collection & Cookies
We respect your privacy. The platform does not use any cookies for tracking, analytics, or advertising purposes. Storage is strictly limited to the following:
- Local Storage: Used exclusively to store JSON Web Tokens (JWT) to keep models logged in, and to save user interface preferences (such as language and theme).
- No data or tracking cookies are stored in the browsers of visitors viewing the models' portfolios.
2. Password Security & Encryption
Passwords are never stored as plain text. They are securely encrypted and hashed using the advanced (Bcrypt) algorithm. This means no one, including platform administrators, can read or recover your original password. Under no circumstances do we send passwords via email.
3. Automatic Data Logging (Server Logs)
For strictly security purposes and to ensure platform stability, we collect limited technical data:
- Server Logs (Nginx): Automatically record IP addresses, browser types, and visit timestamps to prevent malicious attacks. These logs are permanently and automatically deleted every 14 days.
- Audit Logs: Actions performed by the user within their account (e.g., profile updates) are logged for security monitoring and are retained for only 90 days.
4. Hosting & Third-Party Services
Mivaldi is 100% self-hosted. All your data, images, and videos are stored exclusively and securely on our servers located in Germany. We do not use external cloud storage services or third-party processors for your media.
- Technical Exceptions: The platform's interface utilizes Google Fonts, and if you embed videos in your portfolio, it uses YouTube or Vimeo players. Only in these specific cases may the IP addresses of your portfolio visitors be exposed to these companies' servers strictly to load the respective content.
5. Account & Data Deletion
If a user (fashion model) decides to cancel their subscription and delete their account from the platform, all associated data (including images, texts, and videos) will be permanently and irreversibly deleted from our servers within a maximum period of 30 days from the date of the deletion request.