Privacy Policy

Last updated: October 9, 2026

This policy explains how Mystic Mission handles information collected through our marketing website, launch mailing list, enquiries, family accounts, and the game itself, whether it is played in a web browser or in the Mystic Mission iPad app. This page is for parents and other adults.

Information we collect

• Launch signups: your email address, the time you signed up, and whether you used the homepage or launch landing page.
• Campaign information: labels in the link you followed, such as the advertising source, campaign, and creative. We save these with your signup to understand which campaigns bring interested families to us.
• Messages: your email address and any information you choose to include when you contact us.
• Technical information: our hosting and email providers may process IP addresses, browser and device information, delivery information, and server logs to deliver and protect their services.

Your family account and the game

A parent or guardian creates the family account and sets up each adventure. Children do not create accounts or type in personal information.

• Account: the parent’s email address, used to sign in with a one-time code we email, and the kit codes you redeem.
• Family details you enter: your children’s first names (and a pet’s name, if you add one), and the rooms and hiding places in your home that you choose for the hunt. We use these so Pip can greet the children by name and send them to the right room.
• Hiding-place notes: the sentence you write about where you hid each medallion, which we turn into three clues for Pip.
• Progress: which adventures and chapters you have played, the stars earned, and where you left off, so you can continue on another device.
• Game records: our server logs what happens in the game (scenes, spells, hints, errors, and the device and browser used) so we can find and fix problems. These records can include the children’s first names where Pip’s lines say them.

The camera and the microphone

Camera: the game uses your device’s camera to follow the light of the wand and to read the medallions. The pictures are processed on your device, inside your browser or the iPad app, and are not recorded or sent to us. We have a diagnostic mode that saves a few seconds of camera frames around a spell; it is switched on only for our own family’s testing, and we would ask you before ever switching it on for yours.

Microphone: the game listens for spell words and for “Pip, I need help”. Speech is recognised on your device, and the audio is not sent to us. If the on-device recogniser cannot start on your device, the game uses your browser’s built-in speech recognition instead (in the iPad app, Apple’s speech recognition), which may be processed on the maker’s servers, for example Apple’s or Google’s. Our records note that a word was heard, not what was said.

The camera and microphone are only used while an adventure or flight is open, and your browser or iPad shows when they are on. You can switch them off at any time in your browser’s settings or, for the app, in the iPad’s Settings, but the game cannot be played without them.

How we use information

We use this information to maintain the launch list, send the launch news and product updates you requested, run your family’s adventures, respond to enquiries and privacy requests, understand campaign performance, and keep the website and game secure and working.

Browser storage and external services

The marketing page uses session storage in your browser to remember your sound preference and campaign labels during your visit. This version does not embed advertising pixels or third-party analytics scripts. Fonts are loaded from Google Fonts, which receives the technical information needed to serve them. The game also stores your sign-in and a few settings on your device, such as the last adventure you played and whether the camera has already been allowed.

Who receives information

We use service providers to host the website and database and to handle email. Our current infrastructure includes Fly.io for hosting and Resend for application email and signup notifications. ElevenLabs turns the lines Pip and her friends speak to your family into audio, so it receives the text of those lines, including the children’s first names. Anthropic receives your hiding-place notes (with the item and room) to write the three clues; we tell it not to add names, though a room you named after someone will include that name. Providers process information as needed to supply their services. If you email us, your message is also processed by the email services used by you and by us.

We do not sell or rent the launch mailing list or share it with advertisers for their own marketing. We may disclose information when required by law or when reasonably necessary to protect rights, safety, and the security of our services.

Retention and security

We keep launch-list information while it is needed for the updates you requested, and family account information while your account is open. You can delete your family account yourself at any time, and you can ask us to remove launch-list information. Deleting a family account immediately removes its email address, the children’s and pet’s names, your rooms and hiding-place notes, the clues written from them, your progress, and the audio made for your family, and frees the kit codes you redeemed. A short spoken line such as a greeting with a common first name may be kept in our shared voice store, where it is not linked to any account. Game records on the server are overwritten on a short rolling basis, though copies we have taken to fix a problem may be kept until that work is done. We may retain limited information when needed to respect an opt-out, meet legal obligations, or resolve a dispute. Messages and technical records are retained for the purposes described above rather than indefinitely by default.

We use reasonable safeguards to protect information, but no internet service can guarantee absolute security. Service providers may process information in countries other than the one where you live.

Your choices and privacy requests

Deleting your family account: open Settings, then Your account, then “Delete this family account”, in the app or on the website. A grown-up confirms it, and the account is deleted straight away.

To stop launch emails, correct your address, or request access to or deletion of your signup or family account information, use our contact form. Please use the address you signed up with so we can identify your entry. We may need to verify a request before acting on it. You can also use the opt-out instructions in marketing messages you receive.

Depending on where you live, you may have additional rights to access, correct, delete, or receive a copy of your information, restrict or object to its use, withdraw consent, or complain to a privacy regulator. Contact us to exercise an applicable right.

Children

The mailing list and family accounts are for adults. Please use a parent or guardian’s email address, not a child’s. The game is played by children, but it never asks them to type or submit personal information; the only details about a child are the first names a parent enters. If you believe a child has submitted information to us, contact us so we can review it and arrange deletion where appropriate.

Changes and contact

We may update this policy as the website and our practices change. We will update the date above and provide additional notice when appropriate.

For questions about this policy, the launch list or your family account, contact Mystic Mission through our contact form.