Privacy notice
For players and their parents or carers. Last updated: 31 October 2026.
The short version
- We keep as little about you as we can.
- Other players only ever see your nickname and your game stuff (like your cards). Never your email.
- There are no adverts. We never sell your information. There’s no chat.
- If you’re under 13, a parent or carer has to say yes before you can play.
- You can ask to see, fix or delete your information at any time. You can delete your account yourself.
Who we are
MythFoil is a card collecting game at mythfoil.co.uk. It is run by the MythFoil team, who are responsible for looking after your information (the “data controller”).
To ask us anything about your information, email [email protected].
What we keep, and why
| What | Why we need it |
|---|---|
| Your nickname | So you can log in, and so other players know who they’re trading with. It’s the only thing about you other players see. Please don’t use your real name. |
| Your email address | To check the account is really yours, to send password reset links, and for important notices about your account. Never shown to anyone else. We don’t send marketing emails. |
| Your password | To keep your account safe. We only store a scrambled version (a “hash”), so nobody at MythFoil can read your password. |
| The year you were born | Just the year, not your birthday. It tells us if you’re under 13, so we know to ask a parent or carer first. |
| A parent or carer’s email (under-13s only) | To ask them to agree to your account, and to tell them about it. We don’t use it for anything else. |
| Game information | Your Coins, cards, trades, scores and settings, so the game works. For now, most of this is saved on your own device, not on our server. |
| When you joined and last logged in | To run your account, and so we can tidy away accounts that were never confirmed. |
| Your IP address (in security logs) | An IP address is a number your internet connection uses. We record it when people log in or sign up, to stop people guessing passwords or making lots of fake accounts. |
| Reports | If you report another player, we keep what you told us so we can look into it. |
We use a cookie to keep you logged in, and a short-lived one on the pages you reach from our emails (it stops other websites pressing buttons for you). They aren’t used for tracking or adverts.
We don’t use tracking or analytics tools. We don’t collect your location. We don’t build a profile of you to show you adverts or suggestions. There’s no chat, and we never ask you to share more than you need to.
Who can see what
- Other players see your nickname and your game stuff, like your showcase cards and level. Your whole collection is private unless you choose to show it in your Profile settings.
- The MythFoil team (two people) can see account details when they need to, for example to deal with a report or help you with your account.
- Our email service (SMTP2GO) sends our emails, so it handles email addresses for that only. Our web host stores the data on its servers. Cloudflare sits in front of our website to keep it fast and protect it from attacks, so it handles visitors’ IP addresses for that only.
- Nobody else. We never sell or share your information for adverts or marketing.
How long we keep it
- If an account isn’t confirmed by email, or a parent hasn’t said yes, within 7 days of our latest email asking, we delete it.
- If a parent says no, we delete the account straight away.
- When you delete your account, we delete it straight away. Any reports you made stay, but without your name on them. Game progress saved on this device is deleted too; if you played on another device, its copy stays there until you clear that browser.
- A parent or carer’s email is kept while the account exists, and deleted with it.
- Reports are kept so we can spot repeated problems. A report about a deleted account stays, but only says “deleted player”.
- Records of log-in attempts are kept for about a day. Our server logs, which can include IP addresses, are kept for 30 days. Our web host also keeps its own logs for a limited time.
- Email links work once: confirming your email or a parent’s approval within 7 days, and password resets within 1 hour.
Under 13? A parent or carer has to agree
If you’re under 13, the law says a parent or carer must agree before you use MythFoil. When you sign up, we email them. The email shows exactly what we store, and they can say yes or no. You can’t log in until they say yes. If they say no, the account is deleted.
Parents and carers: you can ask us at any time to see, change or delete your child’s information, or to close their account. Email [email protected].
Keeping MythFoil friendly
Players can block other players. Reporting another player from inside the game is coming soon; until then, email [email protected] and we’ll look into it. Our team reads every report. We may hide a nickname, or ban an account, if someone breaks the rules. Nicknames are checked against a list of rude and misleading words.
Your rights
You (or your parent or carer) can ask us to:
- show you the information we have about you;
- fix anything that’s wrong;
- delete your information. You can also do this yourself: Profile, then Delete account.
You can also ask us to stop using your information, or to give you a copy of it. Email [email protected] and we’ll reply within a month. We might ask you to prove the account is yours first.
If you’re not happy with how we’ve handled your information, you can tell the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk. We’d like the chance to put it right first, though.
The legal bit, simply
We use your information to provide the game you signed up for (a contract), and to keep MythFoil safe and secure (our legitimate interests). For under-13s, we also rely on a parent or carer’s consent. If we change this notice in a big way, we’ll tell you in the game.