Your data, in plain terms

The short version

We collect the little we need to run your account and keep the app fast: your sign-in email and the profile you build, plus a coarse, city-level sense of where you are so the events map opens somewhere useful. We do not sell your personal data, we do not build advertising profiles, and we do not track you across other websites. That's the whole shape of it — the sections below are the detail.

Account data

When you create an account, we collect your email address and the profile information you choose to add (such as your display name, avatar, and the events and communities you follow). Accounts and sign-in are handled by Supabase Auth, which stores your credentials securely on our behalf. We use this data for one purpose: to run your account — to sign you in, show you your stuff, and let you take part.

Location

The events map opens on your approximate area so you don't start every visit staring at the middle of the ocean. That approximation comes from a coarse, city-level signal our content delivery network (Vercel) derives at the edge from your connection. We never store or log your IP address, and this region hint is used to frame the map — not saved to your account.

Precise location is only ever used when you tap “Show events near me,” which asks your browser for permission first. It's opt-in, it's only used to sort what's nearby in that moment, and it isn't stored beyond that session. Say no and the app keeps working — you just browse by region instead.

Analytics

To understand aggregate traffic and keep pages fast, we use Vercel Web Analytics and Speed Insights. Both are cookieless and aggregate: they don't set tracking cookies, don't store identifiers on your device, don't build a personal profile of you, and can't follow you across other sites. What we see is anonymized and pooled — which pages are visited, rough referrers, country-level location, device and browser type, and page-performance numbers.

We use this only to improve Mythos, and we don't sell it. If we ever add richer behaviour analytics — heatmaps, session patterns, anything of that kind — it would be de-personalized and described here before it went live, not slipped in quietly.

Sharing & visibility

Your information is private by default. You choose what to share and with whom — friends, co-attendees, or the public — across your attendance, plans, and profile. Enforcement lives in the backend, not just the interface: people only ever see what you've chosen to share, so a bug in the app can't quietly expose you. We share data with the service providers that run the platform (hosting, authentication, email) only as much as is needed to operate it.

Our promise about personal data

This is a line we hold ourselves to, not marketing: Mythos does not sell your personal data, and we don't treat you as the product. Some day we may build tools that help organizers understand their events — but those would run on anonymized, aggregate patterns, never on selling who you are. Anything in that direction gets disclosed here first.

Your controls

You can access, update, or delete your account and its data at any time — from your account settings, or by emailing privacy@mymythos.gg. If you joined a beta mailing list, every message includes an unsubscribe link. Ask us a privacy question at the same address and a real person will answer.

Contact

Questions about your privacy or this page? Email privacy@mymythos.gg.