Skip to content

Privacy Policy

Last updated: June 18, 2026

This Privacy Policy describes how MythicByte ("we," "us," or "our") collects, uses, and shares information about you when you use GameMinder, including our web app, Discord bot, and any mobile applications that link to this policy (collectively, the "Services").

The Services are intended for users located in the United States. Access from outside the United States may be restricted.

Questions? Contact us at privacy@mythicbyte.io.

1. Information We Collect

Information You Provide Directly

When you register or use the Services, we may collect:

  • Email address — required for account creation and verification
  • Username or display name — used to identify you within campaigns
  • Password — stored using one-way hashing; we never store your password in plaintext
  • Discord account data — if you link your Discord account via OAuth, we receive your Discord user ID, username, display name, and avatar URL from Discord

Information Collected Automatically

When you access the Services, we automatically collect:

  • Log data — request paths, HTTP status codes, timestamps, and error details
  • Device and browser data — browser type and version, operating system, and device type
  • IP addresses — processed by our infrastructure and error-monitoring providers for security and debugging; we do not store or use IP addresses to derive your location

We do not use cookies or web beacons for tracking or advertising. We use a single functional cookie (refresh_token) to maintain your login session. This cookie is HTTP-only and is used solely for authentication.

Information from Third Parties

If you connect your Discord account, we receive profile information from Discord as described above. The information we receive depends on your Discord privacy settings.

Mobile Application (Planned)

When our mobile app is available, it may collect:

  • Device data — device model, OS version, app version, unique device identifiers, and crash logs, collected for debugging and service improvement
  • Push notification tokens — to deliver session reminders and notifications via Firebase Cloud Messaging
  • Calendar and storage access — if you grant permission, to add sessions to your device calendar or read and write files for campaign export and import

2. How We Use Your Information

We use the information we collect to:

  • Create and manage your account
  • Deliver the Services, including campaigns, sessions, RSVPs, surveys, and reminders
  • Send transactional emails, including email verification and session notifications
  • Enable communication between campaign members (game masters and players)
  • Collect and deliver post-session survey feedback
  • Send marketing and product update emails (you can opt out at any time)
  • Monitor errors and improve the Services
  • Protect the Services from abuse, bots, and fraud
  • Comply with applicable legal obligations

3. How We Share Your Information

We do not sell your personal information. We do not share your personal information with third parties for advertising purposes.

Service Providers

We use third-party service providers who process data on our behalf:

Provider Purpose Data shared
Sentry (sentry.io) Error monitoring and performance tracing IP address, user agent, user ID, stack traces
Cloudflare Web analytics, CDN, and bot protection IP address, browser and OS info, pages visited, referrer
SMTP2GO Transactional email delivery Recipient email address, email content
Discord OAuth identity provider OAuth tokens, Discord profile data
Firebase (Google) Push notification delivery (mobile, planned) Device push token

Other Users

Within a campaign, other members can see your username, role (game master, player, or spectator), RSVP status, availability windows, and member goals. Game masters can see player survey participation status and survey responses submitted to them.

Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

We may disclose your information if required to do so by law or in response to valid legal process.

4. Discord Integration

The Services allow you to register or log in using your Discord account. When you do this, we receive certain profile information from Discord. We use this information only to link your Discord identity to your GameMinder account and to enable Discord-based features.

We are not responsible for Discord's use of your information. We encourage you to review Discord's Privacy Policy to understand how they collect and use your data.

5. Data Retention

We retain your personal information for as long as your account is active. When you delete your account, we will delete or anonymize your personal information from our active systems, except where we are required to retain it for legal or compliance purposes.

Certain aggregated or anonymized data, such as campaign statistics, may be retained after account deletion. Expired session tokens, email verification tokens, and similar temporary records are purged automatically by background processes.

6. Security

We implement technical and organizational measures to protect your personal information, including:

  • Passwords stored using one-way cryptographic hashing
  • HTTPS encryption for all data in transit
  • HTTP-only authentication cookies with the Secure flag set in production
  • Short-lived access tokens (15 minutes) with rotating refresh tokens
  • Error monitoring and alerting via Sentry

No method of transmission over the internet is 100% secure. We cannot guarantee absolute security, and you use the Services at your own risk.

7. Children's Privacy

The Services are not directed to children under 18. We do not knowingly collect personal information from anyone under 18. If you believe we have collected information from a child under 18, please contact us at privacy@mythicbyte.io and we will delete it promptly.

8. Your Privacy Rights

Depending on the US state where you reside, you may have rights regarding your personal information, including the right to:

  • Know whether we are processing your personal information
  • Access the personal information we hold about you
  • Correct inaccurate personal information
  • Delete your personal information
  • Opt out of the sale or sharing of personal information (we do not sell or share personal information)
  • Non-discrimination for exercising your privacy rights

To exercise any of these rights, contact us at privacy@mythicbyte.io. We will respond within the timeframe required by applicable law.

Opting out of marketing: Click the unsubscribe link in any marketing email, or contact us directly. You will continue to receive transactional emails necessary for the operation of your account.

California residents: Under California Civil Code Section 1798.83 ("Shine the Light"), you may request information about any personal information we have shared with third parties for direct marketing purposes. We do not share personal information with third parties for direct marketing. For additional rights under the CCPA/CPRA, contact us at privacy@mythicbyte.io.

9. Do-Not-Track

Our Services do not currently respond to Do-Not-Track browser signals, as there is no uniform standard for interpreting them. We do not engage in cross-site tracking or behavioral advertising.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will notify you by email or by a prominent notice within the Services.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at:

MythicByte privacy@mythicbyte.io