Leonardo Mirror

Privacy Policy

Last updated: 2026-10-21

This English text is provided for convenience. The Japanese version is the authoritative one; if the two differ, the Japanese version prevails.

Leonardo Mirror (“the app”) collects no personal information whatsoever. This policy sets out exactly what that means.

1. Information we collect

None. The app talks to the network in only two cases, both Pro features: (1) when you paste an image URL to import it, it fetches the image you named; (2) when you choose to download additional paintings and confirm the download size, it fetches the paintings from the developer’s distribution server (https://assets.leonardomirror.app/ ).

Both requests only fetch images, and keep no cookies or cache on the device. The app does not transmit your name, email address, device identifier, location or usage data (such as which paintings you open or which views you save). A download request does contain the file name of the painting being fetched.

The distribution server for additional paintings runs on Cloudflare R2, operated by Cloudflare, Inc. When you download, Cloudflare processes connection information such as your IP address (Cloudflare privacy policy: https://www.cloudflare.com/privacypolicy/ ). The developer has not configured the distribution server to keep access logs.

2. Analytics and advertising

No analytics SDK, no advertising SDK and no crash reporting are built into the app. Which artwork you opened and which view you saved stay on the device.

3. What is stored on your device

  • Saved “views” (the numeric state: artwork, axis, colour look, fold amount)
  • Display preferences such as the gallery layout (list / grid)

These are stored inside the app sandbox and are never transmitted anywhere. Deleting the app deletes them with it.

4. External links

Tapping a source URL on an artwork information screen opens an external site, such as a museum’s, in your device’s default browser. Release Notes, Privacy Policy and Terms of Use under “Website” in Settings open the official website (leonardomirror.app) in the same browser; how that site handles data is described in section 6. “Rate on the App Store” in Settings opens the review page on the App Store. How a destination site or service handles your information is governed by its own privacy policy.

5. Sharing

Sharing a view you found opens the standard iOS share sheet. You decide the recipient and the contents; the developer of this app never receives them.

6. Official website (leonardomirror.app)

  • Information sent: the URL of the page viewed, the referrer, and page performance measurements such as load time (values from the browser’s Performance API, including Core Web Vitals)
  • Recipient: Cloudflare, Inc.
  • Purpose: to understand the Site’s page views, referrers, and loading speed, and to improve the Site

The official website of the app (https://leonardomirror.app/ , “the Site”) is hosted on Cloudflare Pages by Cloudflare, Inc. When you access the Site, Cloudflare processes connection data such as IP addresses (Cloudflare Privacy Policy: https://www.cloudflare.com/privacypolicy/ ).

To understand page views and page performance, the Site uses Cloudflare Web Analytics, provided by Cloudflare, Inc. When you open a page on the Site, Cloudflare’s measurement script (static.cloudflareinsights.com) is loaded and your browser sends the following to Cloudflare:

6-2. What the developer receives from this measurement

In the Cloudflare Web Analytics dashboard the developer can see only page view and visit counts, aggregated by country, device type, browser, operating system, referrer, and page. The developer does not receive individual visitors’ IP addresses through this measurement.

According to Cloudflare’s documentation, the measurement script does not use browser storage such as cookies, localStorage, sessionStorage, or IndexedDB. Cloudflare also states that the IP address received with the measurement data is discarded at the nearest Cloudflare data center and is not stored (https://developers.cloudflare.com/speed/observatory/rum-beacon/ ).

The Site has Cloudflare Bot Fight Mode enabled to counter abusive automated traffic. As a result, a Cloudflare check script is inserted into the Site’s pages, and Cloudflare sets security cookies (such as cf_clearance) in your browser. According to Cloudflare, cf_clearance records that a check was passed so that the same check is not repeated, and these cookies are strictly necessary to provide the service (https://developers.cloudflare.com/fundamentals/reference/policies-compliances/cloudflare-cookies/ ). The developer does not receive the contents of these cookies. The measurement script described in Section 6 does not use cookies.

If you block scripts from static.cloudflareinsights.com (for example, with a browser extension), this data is not sent. The Site remains fully viewable.

This measurement applies to the Site only. It is not built into the app (Section 2).

7. Children’s privacy

Because the app collects no personal information, there is no additional information collected from users of any age.

8. Changes to this policy

If this policy changes, this page and the “last updated” date will be updated.

9. Operator and contact

This app is developed and provided by an individual developer, Yuya Miyanogawa.
[email protected]