Privacy Policy

1. Who We Are

Mythpact is operated by Ryan Edwards, a sole trader based in the United Kingdom.

Contact: [email protected]

2. What Data We Collect

When you create an account:

• Username and email address
• Password (stored as a secure hash, never in plain text)

When you play:

• Game history, wins, losses, ranking data
• In-game purchases and Drachma balance

When you make a purchase:

• Payment is processed by Stripe — we do not store your card details
• We receive confirmation of payment and the amount paid

Automatically:

• IP address and browser type via server logs
• Page views and session data via Google Analytics

3. How We Use Your Data

• To operate your account and provide the game service
• To process purchases and credit Drachma to your account
• To send account verification and password reset emails
• To monitor for abuse, cheating and security threats
• To improve the game using anonymised analytics data

4. Third Parties

We share data with the following third parties only where necessary to provide the service:

Service	Purpose	Privacy Policy
Stripe	Payment processing	stripe.com/privacy
Google Analytics	Anonymised usage analytics	policies.google.com
Railway	Server and database hosting	railway.app/legal/privacy

We do not sell your data to any third party.

5. Data Retention

We keep your account data for as long as your account is active. If you request account deletion we will remove your personal data within 30 days, except where we are required to retain it for legal or financial compliance purposes.

6. Your Rights

Under UK GDPR you have the right to:

• Access the data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to processing of your data

To exercise any of these rights contact [email protected].

7. Cookies

We use Google Analytics which sets cookies to track anonymised usage data. You can disable cookies in your browser settings at any time. Disabling cookies will not affect your ability to play Mythpact.

8. Security

We take reasonable technical measures to protect your data including password hashing, HTTPS encryption, rate limiting and JWT authentication. No system is completely secure — if you believe your account has been compromised contact us immediately.

9. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date. Continued use of Mythpact after changes constitutes acceptance of the updated policy.

10. Contact

For any privacy related questions contact [email protected].