Mimir · Legal
Privacy notice
Mimir keeps your library on your device. This notice says exactly what Mimir does collect, why, for how long, and how you can use your rights. It is written in plain English; versions in the languages of India's Eighth Schedule are planned, and you can ask for this notice in one of them by writing to us.
Who we are
Terratales Media Entertainment Private Limited ("Terratales", "we") runs Mimir and is the Data Fiduciary for the personal data described here. Registered office: Third Floor situated at Mr. Balraj Singh Lohiya House No. 170 in Kh No. 393, G/F, L/S. Vill- Ghitorni Near-100 Feeta Road, New Delhi 110030. Phone +91 95994 85028. Email hello@terratalesmedia.world. Privacy contact: To be added: privacy@terratalesmedia.world: create this mailbox before publishing. Company registration details: To be added: CIN and any other registration numbers to be added.
What stays on your device
Your library, ratings, lists, journal, trackers, taste edits, preferences and similar settings are stored in your browser on your own device. We do not receive them. Mimir works fully this way, with no account. The cookie policy lists every item.
If you create an account
An account is a recovery key. Your browser encrypts your data with it before sending anything, so we cannot read what you save. The server keeps:
- a vault identifier and a keyed hash of a secret derived from your key (neither reveals the key);
- your encrypted data, its size and version;
- the date the account was created and last used;
- whether you allowed analytics, and the version of this notice you saw.
We do not ask for your name, email address, phone number or date of birth. You confirm you are 18 or older with a tick; we do not keep proof. If you lose your key we cannot recover your data.
Analytics, only if you allow it
When you choose "Allow analytics" we count anonymous usage: a random identifier kept on your device (you can reset it), page and feature names, device type, browser, operating system, screen size class, language and how fast pages load. We never receive what you search for, rate, save or write. Your IP address is not stored: it is used only to limit abuse and is discarded. Without your permission none of this is collected.
Error reports, always
When something breaks, Mimir may send the error message, the page name and the site version, with no identifier, so we can fix it.
Other parties who see technical data
- GitHub Pages serves the Mimir site, and WordPress.com (Automattic) hosts the account and analytics server. Like any host, they process your IP address and request details in their own logs under their own policies.
- Cover images and thumbnails load from their original sources (for example Wikimedia, Open Library and YouTube), which can see your IP address when your browser fetches them.
- A YouTube video loads only after you press its play button, in YouTube's privacy-enhanced mode; YouTube then applies its own policy.
- If you email us, we keep your message and address to reply to you.
Why we use your data, and your consent
We use data only for the purposes above: running accounts, keeping Mimir secure, fixing errors, and, if you allow it, learning how Mimir is used so we can improve it. We do not sell or rent data, show advertising, or build profiles to target you. Where consent is the basis you can give it or refuse it freely, with no loss of any feature, and withdraw it as easily as you gave it: use "Privacy choices" in the footer of every page.
Your rights
Under the Digital Personal Data Protection Act, 2023 you can:
- ask for a summary of the personal data we process about you and who we share it with;
- ask us to correct, complete or update it;
- ask us to erase it and withdraw consent;
- have your grievance heard, and complain to the Data Protection Board of India if you are not satisfied;
- nominate another person to exercise these rights if you die or cannot act for yourself.
In Mimir, Export my data and Delete my account on the Account page do the first and third at once, for account data. For anything else, or if you cannot sign in, use data requests. Because accounts are anonymous, we can only act on a request if you can prove control of the vault, for example by signing in; we will not ask for more personal data to verify you.
Children
Accounts are for people aged 18 or over. We do not knowingly create accounts for, track, monitor the behaviour of, or target advertising at, anyone under 18, and the analytics prompt is not meant for them. A parent or guardian who believes a child has created an account can write to us and we will delete it. Mimir works fully without an account on a child's device and collects nothing from it unless analytics is switched on.
How long we keep data
| Data | Kept |
|---|---|
| Account vault | Until you delete it. Deleted at once from our database; copies in host backups age out within To be added: backup retention period to be confirmed with the host |
| Analytics counts, visitor identifiers and error reports | 13 months, then deleted |
| Rate-limit counters | Up to one hour |
| Emails you send us | While needed to deal with your request, then deleted |
| Accounts unused for a long time | We may delete them after To be added: inactivity period, minimum 90 days, to be decided; we will say so here before it is switched on |
Keeping it safe
Account data is encrypted on your device before it is sent. The server stores only ciphertext, limits repeated guesses, sets no cookies and logs no keys. Details are on the security page. If a personal data breach affects you, we will tell you and the Data Protection Board of India as the law requires.
Moving data abroad
Our hosts may store data in data centres outside India. We do not restrict transfers except as the law of India requires.
Grievances and contact
Grievance Officer: To be added: Name of the Grievance Officer: to be appointed and added. Write to hello@terratalesmedia.world (privacy contact: To be added: privacy@terratalesmedia.world: create this mailbox before publishing) or to the registered office above. We will acknowledge within 7 days and aim to resolve within 30 days To be added: confirm response times. If you remain unhappy you can complain to the Data Protection Board of India.
Changes to this notice
We will change this notice when what we do changes, and say so below. Material changes will ask for your choice again.
Version history
- 27 October 2026 (version 2026-10): first published, with accounts and optional analytics.
This notice is not legal advice and has not yet been reviewed by counsel: To be added: legal review pending.