Privacy Policy

This platform is operated by Mirror Production House (MPH) on behalf of partner schools. Each school remains the data controller for its own student list; MPH acts as a data processor that makes yearbooks available to the right families.

From schools: student roster (student number, name, grade or class, optional Arabic name). Rosters are provided by the school and never accepted from anonymous sources.

From parents: when you order a yearbook we collect your email (required) and, optionally, a phone/WhatsApp number and delivery notes. Payment card details are handled by our processor (Stripe or Paymob) and never touch our servers.

Automatic: IP address, basic device information, and page-view counts tied to your access link — used to detect abuse and provide analytics to your school.

The yearbook is never public. Access always requires a signed, time-limited token issued to a specific student. Downloads use single-use, 60-second tickets that re-verify your session before any file bytes leave our servers — a copied download URL will not work for anyone else, or for you after the first use.

All traffic is served over HTTPS with HSTS. Passwords (for school administrators only) are hashed with bcrypt. Admin access is role-based and audited.

• We don't sell your data or your child's data — ever.
• We don't share student lists across schools.
• We don't use student photos for marketing.
• We don't track parents across other websites; there's no third-party advertising on this platform.

You can ask your school or email us to: view what we hold about your order, correct it, revoke your access link, delete your order, or request deletion of the associated personal data. Data tied to completed purchases is kept for the school's required retention period and then removed.

The platform is parent-facing. Children don't create accounts or upload anything. Student names and photos appear only inside the yearbook their school publishes, and only to verified parents of that school.

Privacy questions: orders@mirror-ph.com.