Privacy Contract
Mythic Match is built around fictional creature personas, not real-world identity.
Never collected or persisted
Real name, email address, phone number, physical address, real photos, social login identifiers, date of birth, exact location, contact list, browser fingerprint, advertising identifiers, analytics identifiers, and persistent IP profiles.
What the app stores
The app stores Creature ID, recovery hash, realm, archetype, presentation, temperament, affinities, intentions, boundaries, lore, profile voice, generated avatar URL, symbolic reactions, matches, preset cards, blocks, reports, and moderation review states. Pass phrases are shown once and only their server-side hash is stored.
Custom input handling
Custom realm, archetype, affinity, intent, boundary, and related labels are saved in separate moderation tables. They are not mixed into the official deterministic taxonomy unless the operator deliberately promotes them in a future code or data update.
AI and storage providers
Gemini is used for profile text moderation, lore generation, and avatar generation. Supabase stores the PostgreSQL app records and generated avatar objects. The app does not intentionally persist raw provider payloads, raw avatar prompts, or provider debug responses in profile records.
Communication limits
Direct match interaction is limited to symbolic reactions and preset cards. There is no unrestricted private text chat in the beta, which reduces pressure to share real identity, contact details, or sexual content.
Production handling
Production disables analytics, third-party trackers, request-body logging, and debug logging of private payloads. Apache access logs omit query strings, referrers, user agents, and request bodies, and keep only short operational retention. Server errors are sanitized before they reach the browser.
Retention
Active profiles are kept until hidden, deleted, or removed for moderation. Reports are retained for moderation review and abuse trend checks for up to 18 months unless a concrete safety or legal reason requires longer. Generated avatars are retained while referenced by a profile; unreferenced generated avatars are cleanup candidates.
Profile controls
Recovered profiles can export their app records, regenerate avatars, edit lore, and hide themselves from active public surfaces with Creature ID plus pass phrase verification. They can also permanently delete the profile and associated app records after an explicit confirmation. During beta, avoid putting pass phrases, real contact details, or real identity facts into feedback, reports, custom labels, lore, or screenshots.