Data Collected
Myth Engine may collect account email, email verification state, authentication credentials (stored only as a salted hash), itch.io user or purchase identifiers, ownership status, license status, support requests, security events, and account preferences.
To enforce activation limits and detect abuse, the service also records the IP address and browser/device (user-agent) information seen during account, activation, download, and administrative activity. These network identifiers are stored as a keyed hash rather than in raw form.
License Activation
License activation uses hashed device signals for activation limits, fraud prevention, account recovery, and support. The service stores the derived hash rather than the raw submitted device fingerprint.
- Users can deactivate devices from the account dashboard.
- Support activation resets require an audited reason.
- Self-service deactivation and audited support resets provide recovery paths after legitimate hardware or operating-system changes.
Payments
itch.io processes payment information, taxes, receipts, refunds, and file delivery under its own policies. Myth Engine does not receive payment-card details. When a purchase is connected, Myth Engine stores limited itch.io identifiers, verification dates, and an encrypted OAuth token or download-key proof so ownership can be rechecked. The proof is never displayed as a Myth Engine license key.
Security
Dashboard sessions use secure cookies, sensitive actions require recent reauthentication, and account-security emails are sent for important account and license events.
Account, license, and receipt emails are delivered through a third-party email service provider, which receives the recipient's email address and the account or license details included in that message.
Retention
Account deletion disables sign-in and activation, revokes the site's license records, removes stored itch.io authorization secrets, and anonymizes unnecessary profile data. Hashed purchase-proof, entitlement, activation, security, and fraud-prevention records may be retained for required legal and business periods. Deleting a Myth Engine account does not delete the separate itch.io account or purchase.
User Rights
The account dashboard provides account deletion, data export, email changes, password reset, and device deactivation. Users can also request support review of ownership or license status; payment and purchase-history requests are handled through itch.io.
