Privacy Policy

Last updated: 23 October 2026

This policy explains what personal data Brand Mirage processes, why, and what rights you have. It covers the website brandmirage.com, email contact with us, and the software tools Brand Mirage uses to publish and manage its own content on YouTube and TikTok.

1. Who is responsible

The controller under the EU General Data Protection Regulation (GDPR) is:

2. Visiting this website

This website is hosted by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). When you visit, Cloudflare processes technical data needed to deliver the pages securely, such as your IP address, browser type, the page requested and the time of the request. This data is used only to deliver the website and protect it against attacks, and is not used to identify you.

• Legal basis: our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR).
• Cloudflare may process data in the USA. Cloudflare participates in the EU–US Data Privacy Framework and uses the EU Standard Contractual Clauses.
• Cloudflare privacy policy: cloudflare.com/privacypolicy

This website does not use cookies, analytics, tracking pixels, advertising tools or third-party fonts. Fonts are served from our own server.

3. Contacting us

If you email us, we process your email address, name and the content of your message to answer you. Legal basis: Art. 6(1)(b) or (f) GDPR. Emails to brandmirage.com addresses are forwarded by Cloudflare Email Routing to a Google (Gmail) mailbox. We delete correspondence when it is no longer needed, unless we are legally required to keep it.

4. Our YouTube channel and use of YouTube API Services

Brand Mirage publishes videos on YouTube (youtube.com/@BrandMirage). YouTube is operated by Google Ireland Limited. When you watch our videos or interact with our channel, Google processes your data under its own policies.

Brand Mirage uses an internal application, Brand Mirage Publisher, which uses YouTube API Services. By interacting with Brand Mirage content that is managed through this application, you agree to be bound by the YouTube Terms of Service. Google's handling of data is described in the Google Privacy Policy.

• Whose accounts: the application is used only by Brand Mirage and connects only to Brand Mirage's own YouTube channel. It is not offered to the public and does not ask other people to sign in.
• What it does: uploads our own videos, thumbnails and captions; edits our videos' titles, descriptions and settings; reads and replies to comments on our videos; and reads our channel's analytics.
• Data about viewers: through the API we receive public comments on our videos (with the commenter's public channel name) and aggregated, anonymous analytics (for example views and watch time by country). We do not receive viewers' email addresses or private data.
• Use and storage: comments are used only to reply and moderate; analytics are used only to improve our content. Comment data is stored for up to 90 days, aggregated analytics for up to 24 months. We do not sell or share this data, and we do not combine it with other data to identify people.
• Revoking access: anyone who has granted an application access to their Google account can revoke it at any time at Google security settings.

5. Our TikTok account

Brand Mirage publishes short videos on TikTok (tiktok.com/@brandmirage), using TikTok's official developer tools to post to its own account only. TikTok processes your data under the TikTok Privacy Policy. We receive only public comments and aggregated statistics about our own account, handled in the same way as described in section 4.

6. Service providers

To run the channel we use processors bound by data-processing agreements, including Cloudflare (hosting, email forwarding), Google (email, YouTube), and cloud computing and AI providers that process our own scripts and media. They do not receive viewers' personal data beyond what is described above.

7. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interests (Art. 15–21 GDPR). To use these rights, email [email protected]. You also have the right to lodge a complaint with a data protection authority, for example the Hamburg Commissioner for Data Protection and Freedom of Information (datenschutz-hamburg.de).

8. Changes

We may update this policy when our services change. The date at the top shows the latest version.