Privacy

IN FORCE FROM 6 AUGUST 2026

This notice explains what Midnight Mythos does with personal data, who else sees it, and how to get it back or get rid of it. It is written from what the application actually does rather than from a template, and it changes when the application does.

Who is responsible

What we hold

Your account. Your email address, when you signed in, and the sessions that keep you signed in. There is no password — sign-in is by a link emailed to you — so there is no password to store, leak or reset.

Your games. Investigators, campaigns, the narrative record, dice results, case notes, and anything you type during play.

What you upload. The text extracted from a scenario you upload, the notes the AI model prepares from it, and images of the pages that look like player handouts.

Pictures generated for you. Scene illustrations and investigator portraits made during your games.

Payments. Your customer reference at our payment processor, your subscription status and dates, your credit balance and your purchase and refund history. We never see or store your card details — those stay with the payment processor.

Usage. A record of each AI request: what kind it was, which model ran it, what it cost, and when. This is what your credit balance is calculated from.

Abuse control. A one-way cryptographic digest of your email address, used only to limit how many sign-in links can be requested. The address itself is not stored for this purpose.

Why we hold it

• To run the service you asked for: your account, your saved games, and the AI turns you request. (Performance of our contract with you.)
• To take payment and keep an accurate credit balance. (Performance of our contract with you.)
• To keep the service working and stop it being abused — rate-limiting sign-in links, preventing runaway automated cost. (Our legitimate interests in a service that stays available and affordable.)
• To keep the financial records the law requires us to keep. (Legal obligation.)
• To understand how the site is used — how many people arrive, which pages they read, and what brought them here — using measurement that sets no cookie and counts views rather than people. (Our legitimate interests in knowing whether the thing we built is any use to anyone.)

What happens to a scenario you upload

• The text is extracted from your PDF inside your own browser. The PDF file itself is never uploaded to us.
• That text is sent to our model provider, which passes it to the AI model that prepares the scenario notes.
• The prepared notes are stored against your account so the game can read them on each turn. They are not re-sent anywhere else.
• During play, your narrative history is sent to the model provider so the Keeper can answer in context.
• Your upload is private to your account. It is never shown to another player, never added to a shared library, and never sold.

What you may upload in the first place is covered by the terms of use.

Who else sees it

Model provider. Runs the AI requests and routes them to model vendors (currently Google, Anthropic, OpenAI, xAI and Black Forest Labs). Receives your scenario text, your play history and the prompts for pictures.

Hosting and file storage. Runs the application and stores generated images and handout scans.

Database. Stores your account, billing records and usage history.

Key-value store. Stores your campaigns, characters and scenario notes.

Email delivery. Sends your sign-in link. Receives your email address.

Payment processor. Takes payment and holds your card details. We never receive them.

Analytics and performance measurement. Counts page views and referrers for us, and measures how quickly pages load. It sets no cookie, stores nothing on your device, and does not receive your account, your games or anything you type.

We are established in the United Kingdom, and several of those providers are based in, or process data in, the United States. Where personal data leaves the United Kingdom or the European Economic Area it is transferred under the safeguards those providers offer for international transfers. If you would like the current detail of a specific provider, ask.

Training

We do not use your data to train AI models. Your scenario text and play history are sent to our model provider to generate your game, and are handled under that provider's terms; we do not grant anyone the right to train on them.

Keeping and deleting

• Burning a campaign deletes its stored notes, its play record and its stored images.
• You can close your account from the billing panel in Settings. It deletes your campaigns, characters, uploads and generated pictures, cancels any subscription, and refunds the unused part of the period you have paid for. It is immediate and cannot be undone.
• Records of payments and credits are kept for as long as tax and accounting law requires, even after an account is closed. We cannot delete those on request, and this is the one thing erasure does not reach.
• We keep no separate archive of your uploads for our own purposes.

Cookies and tracking

The only cookie the site sets is the one that keeps you signed in, which is necessary for the service to work. We measure how the site is used with privacy-preserving analytics that set no cookie and store nothing on your device: they count page views and where they came from, and record how quickly pages load, not people, and they are served from this site's own domain. There is no advertising, there are no tracking pixels, and we do not profile you or sell or share your data with anyone for their own purposes.

Your rights

• Ask what we hold about you, and get a copy.
• Correct anything wrong.
• Have your data deleted. Close your account in Settings and it happens at once — or write to us and we will do it — except the payment records the law makes us keep.
• Ask us to restrict or stop a particular use of your data.
• Get your data in a portable form.
• Object to processing we do on the basis of our legitimate interests.

If you think we have handled your data badly, please tell us first — we would rather fix it. You also have the right to complain to a data protection authority. We are established in the United Kingdom, so ours is the Information Commissioner's Office (ico.org.uk). If you live in the EEA you may instead complain to your own national authority.

Age

This service is not intended for anyone under 18, and we do not knowingly hold data about children. If you believe a child has created an account, write to us and we will remove it.

Changes

This notice changes when the application does. The date at the top is the version in force, and material changes will be brought to your attention rather than made quietly.