Privacy
What we collect, why, and the choices you have, written to be read, not to be survived.
Last updated: October 2026
Mythos exists to help you enjoy hobby life, not to harvest it. This page describes what we actually collect today and why, with no boilerplate, no filler. If something here reads as vague, treat that as a bug and tell us.
We collect the little we need to run your account and keep the app fast: your sign-in email and the profile you build, plus a coarse, city-level sense of where you are so the events map opens somewhere useful. We do not sell your personal data, we do not build advertising profiles, and we do not track you across other websites. That's the whole shape of it. The sections below are the detail.
When you create an account, we collect your email address and the profile information you choose to add (such as your display name, avatar, and the events and communities you follow). Accounts and sign-in are handled by Supabase Auth, which stores your credentials securely on our behalf. We use this data for one purpose, running your account. That means signing you in, showing you your stuff, and letting you take part.
The events map opens on your approximate area so you don't start every visit staring at the middle of the ocean. That approximation comes from a coarse, city-level signal our content delivery network (Vercel) derives at the edge from your connection. The map itself does not store your IP address, and this region hint is used to frame the map and is not saved to your account.
Precise location is only ever used when you tap “Show events near me,” which asks your browser for permission first. It's opt-in, it's only used to sort what's nearby in that moment, and it isn't stored beyond that session. Say no and the app keeps working. You just browse by region instead.
To understand aggregate traffic and keep pages fast, we use Vercel Web Analytics and Speed Insights. Both are cookieless and aggregate: they don't set tracking cookies, don't store identifiers on your device, don't build a personal profile of you, and can't follow you across other sites. What we see is anonymized and pooled, covering which pages are visited, rough referrers, country-level location, device and browser type, and page-performance numbers.
We use this only to improve Mythos, and we don't sell it. If we ever add richer behaviour analytics (heatmaps, session patterns, anything of that kind), it would be de-personalized and described here before it went live, not slipped in quietly.
When you say you are going or interested in an event, that is private to you by default. You can change it for each event to Friends (your friends who can view the event) or Public (anyone who can view the event). Blocking works in both directions, and who follows whom is visible only to the two people involved. These rules are enforced in the backend, not just the interface. We share data with the service providers that run the platform (hosting, authentication, email) only as much as is needed to operate it.
This is a line we hold ourselves to, not marketing: Mythos does not sell your personal data, and we don't treat you as the product. Some day we may build tools that help organizers understand their events, but those would run on anonymized, aggregate patterns, never on selling who you are. Anything in that direction gets disclosed here first.
When you request beta access we store your email address, the page you came from, your browser's user-agent text, and a one-way, salted hash of your IP address. The hash is used only to limit abuse of the form. Our hosting and security providers may also keep standard server logs, which can include IP addresses, under their own retention rules.
You can ask us to access, correct, or delete your account and its data at any time by emailing privacy@mymythos.gg. If you joined a beta mailing list, every message includes an unsubscribe link. Ask us a privacy question at the same address and a real person will answer.
Questions about your privacy or this page? Email privacy@mymythos.gg.
