MYTHIC EARTH PRIVACY POLICY
Version: 0.1-test
Status: Draft for testing
Last updated: 3 August 2026
1. ABOUT THIS PRIVACY POLICY
This Privacy Policy explains how Mythic Earth collects, uses, stores, protects and discloses personal information when people use the Mythic Earth website and its related account, community, support and communication services.
Mythic Earth is operated by [INSERT LEGAL BUSINESS OR ENTITY NAME].
In this Privacy Policy, “Mythic Earth”, “we”, “us” and “our” refer to the operator of the Mythic Earth website and related services.
This Privacy Policy applies to the website at mythicearthgame.com and to services made available through that website, including:
• public website accounts;
• user profiles;
• the Issue Council;
• support requests and official staff-user conversations;
• account notifications;
• newsletters and development communications;
• account security and recovery systems;
• account privacy, export, deactivation and deletion services; and
• Staff Portal actions that affect a public user account.
2. PERSONAL INFORMATION WE COLLECT
The types of personal information we may collect depend on how a person uses the website.
2.1 Account and identity information
We may collect:
• email address;
• username;
• display name;
• account creation and verification dates;
• account status;
• assigned roles, permissions and groups;
• accepted legal-document versions;
• newsletter and communication preferences; and
• account privacy preferences.
Passwords are not stored in readable form. They are processed and stored using secure password-hashing methods.
2.2 Public profile information
Users may choose to provide profile information such as:
• avatar;
• biography;
• general location;
• website address;
• timezone; and
• other profile information made available through the website.
Some profile fields may be optional. Users may control whether certain profile information, including location and Issue Council activity, appears publicly.
2.3 Issue Council information
When a user creates or participates in an Issue Council report, we may collect:
• report titles and descriptions;
• affected game builds or versions;
• reproduction steps;
• comments and replies;
• uploaded screenshots;
• report confirmations or similar participation;
• report status and resolution information; and
• moderation, assignment and report-history records.
Public Issue Council reports and public discussion may be visible to other website visitors. Private reports, staff notes and restricted evidence are not displayed publicly.
2.4 Support and appeal information
When a user contacts Mythic Earth, we may collect:
• the support category and subject;
• support messages and replies;
• official staff-user conversation history;
• account-enforcement appeal information;
• ticket status, priority and assignment;
• relevant account information; and
• records of actions taken to investigate or resolve the request.
Internal staff notes and restricted moderation evidence are not displayed to the user unless Mythic Earth is legally required or otherwise chooses to disclose them.
2.5 Security and technical information
We may automatically collect or generate technical and security information, including:
• internet protocol address;
• browser and device information;
• session identifiers;
• sign-in and sign-out records;
• password recovery and verification activity;
• security-event history;
• failed authentication attempts;
• account-session information;
• timestamps;
• rate-limit information; and
• audit records relating to important account or staff actions.
This information is used to operate the website, prevent abuse, investigate security incidents and protect accounts.
2.6 Communications and newsletter information
We may collect:
• newsletter subscription status;
• confirmation and unsubscribe records;
• email-delivery status;
• transactional email records;
• campaign history; and
• communication preferences.
Newsletter subscriptions are optional. Account verification, password recovery, security, support and other service-related messages may still be sent when they are required to provide or protect the account.
3. HOW WE COLLECT PERSONAL INFORMATION
We may collect personal information:
• directly from a user when they register, edit a profile, submit a report, contact support, join a newsletter or use an account feature;
• automatically when a person accesses or uses the website;
• when authorised staff perform account, support, moderation or security actions;
• when another user interacts with a public report or discussion;
• through email-delivery, hosting, security and other service providers; and
• where required or authorised by law.
Where practical, users may browse general public content without creating an account.
4. WHY WE USE PERSONAL INFORMATION
We may use personal information to:
• create, verify and manage website accounts;
• authenticate users and maintain secure sessions;
• provide profile and privacy controls;
• operate the Issue Council;
• investigate reports, bugs and technical problems;
• provide support and respond to enquiries;
• conduct official staff-user conversations;
• process account-enforcement appeals;
• send account notifications and required service emails;
• deliver newsletters where the user has subscribed;
• manage invitations, roles, testing access and permissions;
• detect fraud, spam, abuse and security threats;
• enforce website rules and protect users;
• maintain audit and operational records;
• process account exports, deactivation and deletion requests;
• improve the reliability, security and usability of the website;
• comply with legal obligations; and
• establish, exercise or defend legal rights.
We will not use personal information for an unrelated purpose unless the user has consented or the use is otherwise permitted or required by law.
5. PUBLIC INFORMATION
Some information is intended to be public when a user chooses to publish it or participates in a public area of the website.
Public information may include:
• username;
• display name;
• avatar;
• biography;
• website link;
• location, where public location is enabled;
• public Issue Council reports;
• public report comments;
• public report confirmations; and
• public Issue Council activity, where that preference is enabled.
Users should not include passwords, recovery codes, private contact information or other sensitive information in public profiles, reports or comments.
Changing profile visibility does not automatically make an already-public Issue Council report private.
6. COOKIES AND SESSION TECHNOLOGIES
The website uses cookies and similar session technologies that are necessary to:
• keep users signed in;
• maintain secure public and Staff Portal sessions;
• protect forms against unauthorised requests;
• remember essential account or interface settings;
• apply security and rate-limit controls; and
• operate core website features.
At the date of this draft, Mythic Earth does not intentionally use non-essential advertising cookies.
If analytics, advertising or other optional tracking technologies are introduced, this Privacy Policy and any required cookie or consent notice will be updated before those technologies are used.
Users may block cookies through their browser, but essential account and security functions may not work correctly without them.
7. WHEN WE DISCLOSE PERSONAL INFORMATION
We may disclose personal information to:
• authorised Mythic Earth staff, administrators, moderators, support personnel and contractors who require access for their duties;
• website-hosting, email-delivery, backup, security and technical service providers;
• professional advisers such as lawyers, accountants or insurers;
• law-enforcement agencies, regulators, courts or other authorities where required or authorised by law;
• a successor organisation in connection with a genuine business restructure, transfer or acquisition, subject to appropriate confidentiality and privacy protections; and
• another party where the user has consented to the disclosure.
We do not sell personal information.
Service providers are expected to handle information only for the services they provide to Mythic Earth and to apply appropriate security and confidentiality protections.
8. OVERSEAS PROCESSING AND DISCLOSURE
Some hosting, email, security, backup or technical service providers may process information in Australia or other countries.
Before this Privacy Policy is published as a final document, Mythic Earth will identify the countries in which personal information is likely to be processed or disclosed, where it is practical to do so.
Likely overseas locations: [INSERT KNOWN COUNTRIES OR STATE THAT NONE HAVE BEEN IDENTIFIED]
Where personal information is disclosed overseas, Mythic Earth will take reasonable steps required by applicable law to protect that information.
9. SECURITY
Mythic Earth uses administrative, technical and organisational safeguards intended to protect personal information from:
• misuse;
• interference;
• loss;
• unauthorised access;
• unauthorised modification; and
• unauthorised disclosure.
Security measures may include password hashing, session controls, access permissions, audit logging, rate limiting, secure private storage, prepared database statements, file validation, email verification and staff reauthentication for sensitive actions.
No internet service or storage system can be guaranteed to be completely secure. Users should protect their passwords, recovery links and devices and should notify Mythic Earth if they believe their account has been compromised.
10. RETENTION OF INFORMATION
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including legal, security, moderation, fraud-prevention, support and operational purposes.
Retention periods may vary depending on the type of information.
Examples include:
• active account information is retained while the account remains active;
• security, moderation and audit records may be retained after account closure where reasonably necessary;
• completed account-export files are available for a limited period before being removed;
• unread account notifications may be retained until read or otherwise processed;
• archived and read notifications may be removed under established retention rules;
• support and Issue Council history may remain where required to preserve operational or community records; and
• account deletion requests currently have a 30-day cancellation period before final processing.
After permanent deletion is completed, direct account identity is removed or anonymised where appropriate. Certain internal records may remain where required for legal, security, moderation, fraud-prevention or audit purposes.
11. ACCESS, CORRECTION AND DATA EXPORT
Users may access and update much of their personal information through their account pages.
Users may:
• edit their profile;
• update privacy settings;
• review security history;
• manage active sessions;
• review notification preferences;
• review legal-document acceptance history;
• request an account-data export;
• deactivate their account; and
• request permanent account deletion.
Users may also contact Mythic Earth to request access to or correction of personal information that cannot be managed directly through the website.
We may need to verify a person’s identity before providing access or making a correction.
Access may be limited where permitted or required by law, including where disclosure would unreasonably affect another person’s privacy or reveal restricted security, moderation or legal information.
12. NEWSLETTERS AND MARKETING COMMUNICATIONS
Users receive newsletters or promotional development communications only where they have subscribed or otherwise provided valid consent.
Newsletter messages include an unsubscribe method.
Unsubscribing from newsletters does not prevent Mythic Earth from sending required account, security, verification, recovery, support, moderation or legal messages.
13. ACCOUNT DEACTIVATION AND DELETION
Users may voluntarily deactivate their account through the account-closure controls.
A voluntarily deactivated account may be reactivated by the account owner, provided it has not been suspended, banned, staff-deactivated or otherwise restricted in a way that prevents self-service reactivation.
Users may request permanent deletion of their account. A deletion request currently enters a 30-day grace period during which the request may be cancelled using the required verification process.
After permanent deletion is processed:
• the account cannot be restored through self-service;
• direct public identity is removed or anonymised;
• credentials and active sessions are invalidated;
• optional public profile information is removed; and
• certain records may remain for legal, security, moderation, support, fraud-prevention or audit purposes.
14. DATA BREACHES
If Mythic Earth becomes aware of unauthorised access to or disclosure of personal information, we will investigate the incident and take appropriate action.
Where notification is required by applicable law, Mythic Earth will notify affected individuals and the relevant regulator.
15. PRIVACY COMPLAINTS
A person who has a question or complaint about how Mythic Earth handles personal information may contact us through:
• the Contact Support page at mythicearthgame.com;
• the private support-request system; or
• email at support@mythicearthgame.com.
Please include enough information for us to understand and investigate the concern, but do not send passwords, recovery codes or other authentication secrets.
We will acknowledge and investigate privacy complaints within a reasonable period.
If a person is not satisfied with our response, they may be entitled to contact the Office of the Australian Information Commissioner or another applicable privacy regulator.
16. CHANGES TO THIS PRIVACY POLICY
This Privacy Policy is version controlled.
When Mythic Earth changes this policy, we may publish a new version with:
• a new version number;
• a publication date;
• an effective date;
• a summary of the changes; and
• an indication of whether existing users must accept the new version.
Previous published versions may remain available through the legal-document archive.
Where a material change requires renewed acceptance, affected users may be asked to accept the new version before continuing to use relevant account services.
17. CONTACT DETAILS
Mythic Earth
Legal operator:
[INSERT LEGAL BUSINESS OR ENTITY NAME]
Business address:
[INSERT BUSINESS OR POSTAL ADDRESS]
Privacy and support email:
support@mythicearthgame.com
Website:
mythicearthgame.com
Contact Support:
Available through the Support section of the Mythic Earth website.