Privacy Policy

1. Who we are

Mythmaker (“we”, “us”) provides the Service at mythmakerpg.com and app.mythmakerpg.com. For privacy law purposes, we are the controller of the personal data described here. Payment transactions are handled by Polar Software, Inc. as Merchant of Record (see section 4).

2. What we collect

• Account data: your email address and display name.
• Campaign data: the campaigns, scenes, and journal text you create.
• Usage data: metering records of AI usage used to calculate credit balances, plus basic logs (e.g. timestamps, IP address) for security and reliability.
• Payment data: processed by Polar as Merchant of Record. We receive limited transaction details (such as confirmation, amount, and country for tax) but do not receive or store full card details.
• Cookies: we use strictly necessary cookies for authentication and security only. We do not use analytics or advertising cookies. If we add non-essential cookies in future, we will update this policy and obtain consent where required.

3. How we use it

To operate the Service: authenticate you, run and store your campaigns, meter and bill usage, send transactional email (verification, password reset), maintain security, and comply with legal obligations. Where required, our legal bases are performance of our contract with you, our legitimate interests in operating and securing the Service, and consent (for any non-essential cookies).

4. Sub-processors

We share data only as needed with providers that help us run Mythmaker:

• AI model providers — Anthropic and OpenAI: receive the text you submit during play to generate narrative responses.
• Payment / Merchant of Record — Polar Software, Inc.: processes purchases, handles tax, and receives the personal data necessary to complete and account for your transaction under the Polar Privacy Policy.
• Transactional email — Resend: sends service emails such as verification and password resets.
• Business email — Google Workspace: hosts our support, privacy, and report inboxes, so correspondence you send us is processed there.
• Hosting / database — Fly.io: hosts the application and database where your account and campaign data are stored.
• Backup storage — Cloudflare: stores database backups.

We do not sell your personal data or share it for cross-context behavioral advertising.

5. AI processing

Text you submit during play is sent to our AI model providers (Anthropic and OpenAI) to generate responses. Do not submit sensitive personal information (about yourself or others) as part of gameplay. These providers may process your inputs under their own terms; we choose providers that contractually limit use of your data, but you should treat anything you type as leaving our systems for processing.

6. International transfers

Your data may be processed in countries other than where you live, including the United States. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for these transfers.

7. Retention

We keep your account and campaign data until you delete it or close your account. You can delete campaigns at any time; deletion is irreversible in the live system, though residual copies may persist briefly in routine backups before being overwritten. Metering and transaction records may be kept longer where needed for security, accounting, or legal compliance.

8. Your rights

Depending on your jurisdiction (e.g. GDPR/UK GDPR, CCPA/CPRA), you may have rights to access, correct, export, delete, or restrict processing of your personal data, to object to certain processing, and to withdraw consent. To exercise them, email privacy@mythmakerpg.com; we will respond within the timeframe required by applicable law (generally within 30–45 days). You also have the right to complain to your local data-protection authority.

9. Security

We use industry-standard measures (encrypted transport, hashed passwords, access controls). No system is perfectly secure.

10. Changes

We may update this policy; material changes will be posted here with an updated date.

11. Contact

Privacy questions or requests: privacy@mythmakerpg.com