Privacy Policy
Myrieon LLC, a Texas limited liability company, is the controller of the personal data described here. Contact privacy@myrieon.com.
What we collect and why
| Data | Why | Lawful basis |
|---|---|---|
| Email address | Account identity, service notices | Contract |
| Birth year | Age eligibility (16+) | Legal obligation |
| Payment identifiers (not card numbers) | Billing | Contract |
| IP addresses — signup, login, sessions | Security, fraud prevention, payment dispute defence | Legitimate interest |
| Server configuration and usage | Providing the service, capacity planning | Contract |
| File operation audit log | Abuse investigation, legal process, dispute evidence | Legitimate interest / legal obligation |
| Support correspondence | Answering you | Contract |
We never see your card number. Payment is handled by Stripe Checkout; card data does not reach our systems.
Retention
| Data | Period |
|---|---|
| Financial and tax records | 7 years (tax and accounting obligations) |
| File operation audit log | 24 months |
| IP addresses, session and operational logs | 120 days from the event |
| Game data after account closure | 30 days, then deleted |
| Support correspondence | 24 months |
The 120-day period is set deliberately: card payment disputes may be raised for approximately 120 days from a transaction, and we retain address data for that window to defend them. Each record expires on its own clock from the event it relates to, not on a shared sweep date.
Legal preservation holds override every period above. Where we receive a preservation request or other legal process, affected records are retained until the matter concludes, whether or not the period has elapsed.
Processors
We share data with these processors, each under a data processing agreement:
| Processor | Purpose |
|---|---|
| Stripe | Payment processing, fraud screening, tax calculation |
| Cloudflare | DNS, DDoS protection, content delivery |
| Resend | Transactional email |
We do not sell personal information. We do not share it for cross-context behavioural advertising.
Your rights
Wherever you live, you may request access to your data, correction, deletion, a portable export, or restriction of processing. Contact privacy@myrieon.com.
Under GDPR and UK GDPR you may also object to processing based on legitimate interest, and lodge a complaint with your supervisory authority. Under CCPA and CPRA you have rights of access, deletion, correction, and to opt out of sale or sharing — we do neither.
We respond within one month for GDPR requests and 45 days for CCPA, extendable where a request is complex and we tell you why.
What deletion does not remove. GDPR Article 17(3) and equivalent provisions allow retention where required for legal obligations or the establishment or defence of legal claims. On an erasure request we retain: financial records for 7 years, the file audit log for 24 months, and anything under a preservation hold. Everything else is erased.
Once erased we can no longer identify you, which means we cannot afterwards answer a support question or defend a payment dispute on your behalf.
Account options
See Terms §9 — close account, delete account and data, or clear activity data. Only the second is erasure.
Cookies
We use cookies necessary to operate the service — session and authentication. We do not use advertising or cross-site tracking cookies. This website sets no cookies at all.
Children
The service is not for anyone under 16. We do not knowingly collect personal data from anyone under 16, and we delete it where discovered.
Security
Encryption in transit, tenant isolation at the container and network layer, append-only audit logging with separate credentials, and access to customer file history recorded as a privileged action. No system is perfectly secure; we will notify you and the relevant authority of a breach affecting your data as law requires.
Changes
Material changes notified by email at least 30 days ahead. Prior versions archived.