A copy of The Mystical Door's privacy policy, which lives at mysticaldoor.com/privacy/. The two are kept identical.
Privacy Policy
In short: The Mystical Door game does not collect any personal information. There are no accounts in the game, no advertising, no analytics, and no third-party trackers. Your saved games stay on your device, and we never receive them.
Our Help Center at support.mysticaldoor.com keeps only what you choose to give it, such as a comment you post or a support request you send, and uses it only to run the Help Center and to answer you. Section 6 explains exactly what that is.
1. Information The Game Collects
None. The Mystical Door does not collect, transmit, sell, or share any personal or sensitive user data. The game has no sign-in, no user accounts, and no server of its own. We have no way to identify you and no record that you have installed the game.
The game can open our Help Center in your web browser, from Settings or from the “?” in the Gear drawer. Settings can also open our contact form with a few details already filled in (the game's version, your Android version and device model, your hero's class, level and difficulty, where you are in the story, whether you have the full game, which save slot you are using, and, if you are replaying the game, which round you are on), or copy the same details to your clipboard for you to paste into an email. In the form, they travel in the part of the link after “#”, which your browser does not send to our server, so they reach us only if you send the form, and you can change or remove them first. The game itself sends none of this anywhere.
2. Data Stored On Your Device
The game saves the following locally, in private application storage that only The Mystical Door can read:
- Your saved games — character, inventory, progress, and story choices.
- Game settings and preferences.
- A flag recording whether the full game has been unlocked by purchase.
We never receive this information, and the game does not send it anywhere.
If backup is turned on for your device, Android may include this data in the backup that Google keeps for your Google account, and restore it when you reinstall the game or set up a new device. That backup is made, stored, and protected by Google under your own account settings; we cannot see or access it. You can manage or turn off device backup in your device's settings.
Without such a backup, uninstalling the game permanently deletes all of this data.
3. Purchases
The Mystical Door is free to play, and offers a single optional one-time purchase that unlocks the full game.
All purchases are processed entirely by Google Play. Payment is handled within Google's own systems. We never receive, see, or store your name, billing address, card number, or any other payment details. The game only asks Google Play a single question — whether this device owns the unlock — and receives a yes or no.
Google's handling of your payment information is governed by the Google Privacy Policy.
4. No Advertising, Analytics, or Tracking
The game contains no advertisements, no analytics or crash-reporting services, and no third-party tracking software of any kind. Nothing you do inside the game is measured, profiled, or reported.
The only external service the app communicates with is Google Play, and only to verify purchases as described above.
Our websites show no advertising, use no analytics or tracking services, and load nothing from other sites.
5. Permissions
The Mystical Door requests no sensitive device permissions. It cannot access your location, camera, microphone, contacts, photos, files, or call history.
The app declares network and billing permissions, which are required by the Google Play Billing library in order to verify purchases. They are not used for any other purpose.
6. Our Websites
mysticaldoor.com
The game's website is a static site hosted by GitHub Pages. It sets no cookies and loads nothing from other sites. As with any website, GitHub's servers receive your IP address when you visit, which GitHub handles under the GitHub General Privacy Statement.
support.mysticaldoor.com
Our Help Center runs on a server we rent from DigitalOcean, in New York, in the United States. You can read it without an account. It stores the following:
- Comments. If you comment on an article, we store the name you give and your comment, and show both publicly. We do not ask for or keep an email address. The picture beside a comment is drawn by the Help Center from the commenter's initial, unless they have an account with a profile picture. Please keep personal details out of comments, and contact us about your own purchase instead.
- Support requests. If you use our contact form, we store your email address, the name you give if any, your message, any game details you include, and any screenshots you attach, so that we can answer you. We reply by email from Proton (section 7). Before a screenshot is stored, we remove the hidden details pictures can carry, such as where a photo was taken, and check it for unsafe content on our own server. We do not store the IP address a request came from. We keep each request until a year after we close it, then delete it with its screenshots, and we will delete it sooner if you ask. Anyone with a request's ticket number and the email address it came from can check its status on the Help Center: whether we have it, have replied to it or have closed it, and the dates it was sent, replied to and closed. What it says is never shown there.
- Searches that find nothing. When a search finds no article, we keep its words, how many times they have been searched, and when they were first and last searched, so we know which answers are missing. We do not keep who searched. Each is deleted 90 days after it was last searched.
- “Was this article helpful?” answers. We count them without recording who gave them.
- One cookie,
connect.sid. Reading the Help Center does not set it: it is set only when you send something, such as a support request, a comment or a “Was this article helpful?” answer, or sign in. It protects the site's forms against forgery, keeps staff signed in, and remembers which articles you have already answered “Was this article helpful?” for. Your browser deletes it when you close it, and the matching record on our server expires after 14 days. - A draft of the contact form, in your browser. While the contact form is open, what you have put in it, including the game details it was opened with, is kept in that browser tab's session storage, so that reloading the page does not lose it. The draft stays on your device and reaches us only if you press Send. Your browser deletes it when you close the tab, and the Help Center deletes it once your message has been sent. Screenshots are not kept in it.
- Accounts. Sign-up is currently closed, so accounts belong to our staff. If you have an account, we store your email address, your display name, your password in a scrambled (hashed) form that cannot be read back, and any profile picture or messages you add.
- Pictures uploaded to the site are checked for unsafe content on our own server. They are not sent to any other company for checking.
- Server logs record which pages were requested, including any search terms, and when. They do not record IP addresses or who made the request. To limit password guessing and spam, the addresses that sign-in attempts, contact-form requests, ticket status checks, comments and “Was this article helpful?” answers come from are held briefly in the server's memory, and are never written down.
- Backups. The site's database is copied every night, and each copy is deleted after about two weeks. DigitalOcean also keeps backup copies of the whole server for us, each deleted within four weeks.
Everything the Help Center shows comes from our own server, so reading it never sends your IP address or anything else to another company. DigitalOcean hosts that server under the DigitalOcean Privacy Policy. We do not sell, rent, or share anything the Help Center stores with anyone else.
7. Email
If you email us, we receive your email address and whatever you send, through our email provider, Proton, which handles it under the Proton Privacy Policy. We also answer requests sent through the Help Center's contact form from Proton, so your email address and our reply pass through it too. We use your email address only to answer you, and we never add you to a mailing list.
8. Children's Privacy
The Mystical Door and its websites are not directed at children under 13, and we do not knowingly collect personal information from children. The game collects no data at all. If a child has posted a comment on the Help Center, sent us a support request, or emailed us, contact us and we will delete it.
9. Your Data Rights
Privacy laws such as the GDPR and CCPA give you rights to access, correct, or delete personal data a company holds about you.
The game holds none, so there is nothing for us to return or erase. To remove the data stored on your device, uninstall the game, and delete its device backup if you have one.
On the Help Center, we hold only what you have given us: a comment, a support request, an account, or an email. Contact us and we will tell you what we hold, correct it, or delete it. Deleted information also leaves our backups within four weeks.
Records relating to your purchase are held by Google Play, and can be managed through your Google account.
10. Changes To This Policy
If this policy changes, the revised version will be posted at this address with an updated effective date. Material changes will also be noted in the app's release notes on Google Play.
11. Contact
Questions about this policy or about privacy in The Mystical Door:
For help with the game itself, visit the Help Center at support.mysticaldoor.com.