Privacy Policy

Effective September 20, 2026

Mythraval is operated by AQTO LLC. This policy explains what information we collect, why it is used, and the choices available to you. You can play as a guest without creating an account.

Information we collect

• Account information. Email/password accounts provide an email address. If you use Google sign-in, we receive a Google account identifier and basic profile information Google makes available, which may include your email address, name, and profile image. Mythraval currently uses the identifier and email to create and authenticate your account.
• Game information. Signed-in play stores character names, selected character forms, inventory, equipment, progression, quests, discoveries, structures, settings, and other save-game state.
• Multiplayer information. When multiplayer is active, we process your character name, appearance, zone, position, health percentage, level effects, and equipped items so other players in the same game world can see you.
• Device and security information. Our hosting systems and security providers may process IP address, browser and device information, request timestamps, session identifiers, and security signals needed to deliver and protect the service.
• Support reports. When you submit a bug report, we receive your message and account email so we can investigate and reply. You can preview and exclude the optional game details, such as the build, browser, character type, area, frame rate, and captured error report, before sending.
• Local browser data. Mythraval uses local storage for the selected character and preferences such as sound, music, tutorial, inventory, and interface choices. Guest progress may remain only on the device unless you sign in and save it.

How we use information

We use this information to authenticate accounts, save and restore progress, operate multiplayer, prevent abuse, send account and welcome emails, provide password recovery, maintain security, diagnose failures, and improve game reliability. We do not sell personal information or use Google user data for advertising.

Optional payments

Stripe processes payment details for optional development support. We receive payment status and transaction information; card details are entered directly into Stripe Checkout. Contact [email protected] with payment questions.

Google user data

Google sign-in is used only for account authentication. Mythraval does not request access to Gmail, Drive, contacts, calendars, or other Google product data. OAuth state, PKCE verification data, and PocketBase tokens remain in a secure server session and are not stored in browser local storage. Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Service providers and sharing

We disclose information only as needed to operate the service, comply with law, protect users and the service, or complete a business transfer. Current providers include Google for sign-in, PocketBase on our hosted infrastructure for accounts and saves, Convex for live multiplayer state, Stripe for optional development-support payments, Postmark for transactional account emails and submitted bug reports, and Cloudflare Turnstile for abuse prevention. These providers process information under their own terms and privacy commitments.

Retention, security, and your choices

Account and save data are retained while your account is active and as reasonably needed for security, backups, disputes, or legal obligations. We use HTTPS, HttpOnly server sessions, same-origin checks, OAuth state validation, and PKCE. No online service can guarantee absolute security.

You may play as a guest, sign out at any time, remove local data through your browser controls, delete individual character slots or permanently delete your account using Main Menu → Delete account, revoke Mythraval’s Google access in your Google Account, or request access, correction, or deletion of account data by contacting [email protected]. We may need to verify the request.

Children and changes

Mythraval is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided personal information, contact us. We may update this policy as the game changes; the effective date above will identify the latest version.

Contact

Contact AQTO LLC with questions or privacy requests at [email protected].