MimicBack to the appPrivacy Policy
Last updated November 3, 2026
The short version. We collect as little as we can. We never see your card number. We don't sell your data, and we don't use advertising or analytics trackers.
Who we are
Vladimir Dorlus, doing business as Mimic ("Mimic", "we") is responsible for your data. Contact us at support@mimic.day.
What we collect
- Account: your email, optional name, a scrambled (hashed) version of your password, and your tracked wallets list.
- Subscription: your plan, status, renewal date and Stripe customer ID. Stripe collects your payment details. We never receive your full card number.
- Legal records: which version of our terms you accepted and when, with your IP address and browser details, as evidence of your agreement.
- Security: IP addresses and email addresses used in attempts, stored briefly to limit abuse, and standard server logs held by our hosting provider.
- Community: posts, replies and likes you make. Posts are public and show your first name, never your email. Deleting a post or your account removes them.
- On your device: your theme choice and tracked wallets, stored in your browser, and the cookies described below.
If you don't have an account, we store nothing about you ourselves. Our hosting provider still processes your IP address to serve the site, and your browser contacts Hyperliquid directly for live market data, and Google Fonts on devices that use our web font.
Public blockchain data
Mimic publishes public Hyperliquid wallet addresses and their trading activity. We don't try to identify the people behind them. If you believe a wallet page identifies you, or want us to consider removing a wallet from Mimic, write to support@mimic.day. The underlying blockchain data will stay public wherever else it appears, and we can't change that.
How we use data
- To provide the Service and keep you signed in (performing our contract with you).
- To process subscriptions, and to send account, security and billing messages (contract).
- To protect the Service and keep records of consent (our legitimate interests and legal obligations).
We don't sell or share personal data for advertising, and we don't send marketing email unless you ask us to.
Cookies
We use only the cookies needed to run the Service: mimic_session, which keeps you signed in, and mimic_in, which tells the site to check your account. Both last up to 30 days and are removed when you sign out. There are no advertising or analytics cookies, which is why there's no cookie banner. Stripe sets its own cookies on its checkout pages.
Who processes data for us
- Vercel: hosting.
- Neon: the database that holds accounts.
- Stripe: payments and billing.
- Our email provider: password resets and account emails.
- Hyperliquid and Google Fonts: contacted directly by your browser, as described above.
- Telegram: if you join our channel, under Telegram's own policy.
We may also disclose data if the law requires it, to protect rights and safety, or as part of a sale or transfer of the Service. These providers may process data in the United States and elsewhere. Where the law requires it, we rely on appropriate safeguards such as standard contractual clauses.
How long we keep it
- Account data: until you delete your account.
- Consent records: for up to 7 years after your account ends, to prove what was agreed.
- Payment and tax records: held by Stripe, and for as long as tax law requires.
- Rate limit records: overwritten as they age.
Your choices and rights
On the Account page you can download your data, change your password and delete your account. Depending on where you live (including under the GDPR, UK GDPR and California's CCPA/CPRA), you may also have rights to access, correct, delete or move your data, to object or restrict processing, and to complain to a regulator. We don't sell personal information or share it for cross-context behavioral advertising, and we won't treat you differently for using your rights. To use any of these rights, write to support@mimic.day.
Security
Passwords are hashed with scrypt, connections are encrypted, and sessions use signed, HttpOnly cookies. No system is perfectly secure. If a breach affects you, we'll tell you as the law requires.
Children
Mimic is for adults 18 and over. We don't knowingly collect data from anyone younger. If you think we have, write to support@mimic.day and we'll delete it.
Changes
We will update this page when our practices change, and tell you by email or in the Service if the change is material.