Privacy Policy

Last updated July 16, 2026

The short version

MythForge is local-first. Your campaigns, encounters, creatures, notes, and maps live in a database on your device. We run no ads, use no analytics or tracking of any kind, and never sell data. Without an account, the app sends us nothing at all.

Who we are

MythForge is made by Game Masters, based in the Province of Ontario, Canada. For questions, or to exercise any of the rights below, email support@mythforge.app.

What we collect, and when

With no account: nothing. The app works fully offline and sends us no personal data. The bestiary, NPC generator, encounter tracker, battle map, dice, and notes all run on-device.

With an optional account (used for cloud backups and the Vault), we store your email address and an encrypted password, plus:

• Library backups you choose to upload: campaigns, party, equipment, encounters, combatants, notes, dice favourites, and your creatures, items, and spells. Stored against your account and readable only by it.
• Published content: beasts, NPCs, items, or spells you publish to the Vault, public to other MythForge users under your account until you unpublish them.
• Upvotes and pulls: which content you upvoted, and a record that you pulled a piece of content, so creators can see how their work is doing.
• Reports you file: the content reported, the reason, and any note you write. Visible to us as moderators.
• Scan usage counts: a per-hour tally of stat-block scans, used only to rate-limit the feature.

Sharing a table. When you cast a battle map to your players, the map and encounter state for that session are stored on our server against a short join code so browsers can read it. Sessions expire after 12 hours. Any handout image you reveal is kept in private storage under your account until you delete it or the account. Fogged squares are never sent: they are stripped before the state leaves your device, not hidden at the far end.

The waitlist. If you give us your email on this site, we store that email so we can tell you when MythForge launches. Nothing else.

Support and contact messages. If you write to us through the support form or the contact form, we store what you sent — your email, your name on the contact form, the topic you picked, and your message — so a person can read it and reply. We may attach a private note of our own while we work on it. That is the whole use: these messages are never added to a mailing list, never used for marketing, and never shared.

Stat-block scanning

When you photograph a stat block to scan it, the image is sent to our server and forwarded to Anthropic (the Claude API), which extracts the stat block and returns it to your device. We do not keep the image. This is the only feature that sends your content to a third party, and it happens only when you choose to scan.

Who else touches your data

• Supabase hosts accounts, the Vault, backups, table sessions, and handout storage.
• Anthropic processes stat-block photos when you scan, as above.
• Vercel hosts this website and the shared-table viewer.
• Expo delivers app updates. An update check reveals your app version and IP address to Expo, as any download does.
• Apple sells the app, and tells us nothing about you beyond aggregate sales figures.

There is no analytics SDK, no crash reporter, no advertising SDK, and no third-party tracker anywhere in MythForge.

Deleting your account

You can delete your account from inside the app: Camp → Account → Delete account. Confirm, re-enter your password, and it is done. That permanently removes your account, everything you published, your cloud backup, your upvotes and pull records, any reports you filed, any handout images, any shared table sessions, your email if it is on the waitlist, and any support or contact messages you sent us from that address.

Your library on your device is untouched: deleting your account does not reach onto your phone. Copies of content you published that other Game Masters have already pulled stay in their libraries; those copies are theirs now, and we can’t retrieve them.

Deletion is immediate and cannot be undone. If you can’t reach the app (you’ve uninstalled it, say), see the account deletion page.

Your rights

You can use MythForge indefinitely without an account. You can unpublish Vault content at any time, export anything you’ve made as Mythcode, and delete your account outright. Under Canadian privacy law (PIPEDA) and comparable regimes you may also ask what we hold about you, ask for a correction, or ask us to delete it: email support@mythforge.app and we will act within 30 days.

Retention

Account data lives until you delete the account. Table sessions expire after 12 hours. Scan-rate counters age out within the hour. Waitlist emails live until launch, or until you ask us to remove yours. Support and contact messages are kept while we work on them and for a reasonable period after, so we have the history if you write back; ask us and we will delete yours sooner.

Children

MythForge is not directed at children under 13, and we do not knowingly collect their personal information.

Changes

If this policy changes, the date at the top changes with it, and material changes will be flagged in the app or here.

Contact

Questions or deletion requests: support@mythforge.app