Last updated: 7 October 2026
This policy explains what World of Mythos collects about you, why, who else sees it, and how to get it back or get it deleted. It covers the game at worldofmythos.net and any packaged build of the same game, including the iOS app and the Steam version.
World of Mythos is the data controller for the information described here. For anything in this policy — including access, export, and deletion requests — contact support@worldofmythos.net.
Account details. Your player name and your email address. Email is used to verify the account and to log you in; once an account has made a purchase, every login on a new device needs a one-time code sent to that address. If you play through Steam, we store your Steam account ID, which is how Steam logs you in, and your Steam name, which we show you in Settings.
Session tokens. Random strings that keep you logged in and identify you to the game server. They are stored in your browser and are not shared with anyone.
Gameplay data. The record of what happened in your games — rounds played, kills, wins and losses, boss and PvP outcomes, artifacts found, and which items and skins your account owns.
Chat messages. Messages you send in a lobby or the market are stored on our server so they can be delivered and shown in the game.
Chat reports. If you report a chat message, we store the message, the name of the player who sent it, what you wrote in the report, and your account if you are logged in. Reports are used only to deal with abuse.
Purchase records. What you bought, when, for how much, and the reference number of the payment. We never receive or store your card number — see “Payments” below.
Technical data. When something breaks, an automatic error report is sent to our error-tracking provider. These reports are about the fault, not about you: our error tracking is not configured to attach your account details. A report can still incidentally contain technical information such as an IP address, browser version, or the page you were on.
To run the game you asked for (performance of a contract). Your account, session, gameplay history, chat, and purchases all exist because they are what the game is.
Because the law requires it (legal obligation). Records of sales have to be kept for accounting and tax purposes.
To keep the game working and fair (legitimate interests). Error tracking, chat reports, and investigating abuse or cheating.
We do not sell your data, and we do not share it with advertisers. There are no advertising or analytics trackers in the game. We use a small number of service providers, each of which only receives what it needs to do its job:
Some of these providers are based in, or process data in, the United States. Where that happens, the transfer relies on the European Commission's standard contractual clauses and/or the EU–US Data Privacy Framework.
We may also disclose data where we are legally required to — for example in response to a valid order from a court or authority.
Account, gameplay, and chat data is kept for as long as your account exists, and is deleted or anonymised when you ask us to delete the account. Chat reports you made are deleted with your account.
Purchase and payment records are kept for at least five years after the end of the financial year in which the purchase was made, because bookkeeping law requires it. This means deleting your account does not delete your order history — that part we are obliged to keep, and it is retained for accounting purposes only.
Error reports are kept for a limited period by our error-tracking provider and then automatically discarded.
If you are in the EU or EEA, the GDPR gives you the right to get a copy of the data we hold about you, to have it corrected, to have it deleted, to receive it in a portable format, and to object to or restrict certain uses of it.
To use any of these, email support@worldofmythos.net from the address on your account, or from an account you are logged into. We will confirm it's really you before acting — otherwise anyone could ask for your data — and we respond within 30 days.
You also have the right to complain to your national data protection authority if you think we have handled your data badly.
We do not use tracking or advertising cookies. The game stores a few things locally in your browser so it can work at all: your session tokens, your player name and email so you don't have to retype them, your sound and chat filter settings, and the players you have muted. Clearing your browser storage logs you out and resets those preferences. In the iOS app, notifications about the merchants are worked out and scheduled on your phone; nothing about them is sent to us.
World of Mythos is not directed at young children, and you must be 18 or older (or have the consent of a parent or guardian) to make a purchase — see our Terms of Sale. If you believe a child has given us personal data, contact us and we will delete it.
Traffic to the game is encrypted in transit. Verification codes are stored hashed rather than in the clear, and access to the production database is limited. No system is perfectly secure, but if a breach affects your data and poses a real risk to you, we will tell you and the relevant authority as the GDPR requires.
If this policy changes in a way that matters, we will update the date at the top and, for significant changes, tell you in the game or by email.
See also our Terms of Sale and Refund Policy.