Privacy Policy

Last updated: 19 July 2026

This policy explains what data Mystic Odyssey ("the game", "we") collects when you play, why, and what rights you have over it. Mystic Odyssey is a free browser game — we collect the minimum needed to run it and to understand, in aggregate, how it's played.

1. Data we collect

Gameplay progress. Your browser generates a random device identifier the first time you play. We use it to remember your nickname, best score, lifetime essence, and unlocked customizations between sessions. It isn't tied to your real-world identity.
Connection data. Your IP address is processed transiently to operate the live game connection, run basic bot protection (Cloudflare Turnstile — see §3), and prevent abuse. It is not stored alongside your gameplay progress.
Local device storage. Your browser stores small preferences locally — nickname, chosen skin, audio settings, and your cookie consent choice — so the game remembers them on your next visit. This stays on your device.
Analytics. Only if you accept analytics cookies (see our Cookie Policy), Google Analytics collects aggregated, anonymized usage statistics such as pages visited and general engagement.
Contact requests. If you use our Contact page, we process the name, email address, and message you submit solely to respond to you. We do not add you to any mailing list.

2. Legal basis for processing

We rely on: consent for analytics cookies; legitimate interest for connection data used in bot protection, abuse prevention, and keeping the game running; and consent / pre-contractual necessity for handling messages you send us via the Contact page.

3. Third parties

We share limited data with the following processors, each acting under their own privacy policy and, where applicable, appropriate international-transfer safeguards:

Google Analytics (Google Ireland Ltd) — aggregated usage statistics, only after consent.
Cloudflare — bot verification (Turnstile) and network delivery for the site. Turnstile may briefly process your IP address to determine whether a connection looks automated.
Mailjet (a Sinch company) — delivers the email generated when you submit our Contact form. Mailjet processes the name, email address, and message you provide solely to send and deliver that email.

4. Data retention

Gameplay progress is kept for as long as you keep playing, or for a reasonable period of inactivity, after which it may be deleted. Contact form messages are kept only as long as needed to handle your request. Analytics data follows Google Analytics' standard retention settings.

5. Your rights

Under the GDPR, you have the right to access, correct, or delete your data, restrict or object to its processing, request portability, and withdraw consent at any time (use the "Cookie Settings" link in the footer to change your analytics choice). You can also lodge a complaint with your local data protection supervisory authority. To exercise any of these rights, reach us via the Contact page.

6. Children

Mystic Odyssey is not directed at children under 16 and we do not knowingly collect more data from children than described above.

7. Changes to this policy

We may update this policy as the game evolves. Material changes will be reflected by updating the "Last updated" date above.

8. Contact

For any privacy question or request, please use our Contact page.