Privacy Policy

Mystic Stride · Last updated November 3, 2026 · Version 2026-11-03

The Short Version

Mystic Stride is made for players of every age, including kids - in fact, our own kids came up with the story and much of the design of the game and functionality! We're building a game they want to play! Given, then, that this is largely a "by kids, for kids" sort of project, we've built Mystic Stride specifically with our (and your) kids' privacy at top of mind.

If you’re a kid, please read this with a parent or legal guardian.

1. Who We Are

Mystic Stride (the “game”) is made by Adieuu, LLC (“Adieuu”, “we”, “us”). This policy explains what information the game and its online services handle, why, and the choices you have. It covers the game wherever you play it in a web browser, and our online services.

Contact us about privacy at any time:

2. Our Approach

Protecting players, especially children, comes first. Our own kids have designed and play this game, and we’re serious about protecting them: those protections are built into every aspect of the game and our services. We follow these core tenets:

3. Playing Offline

You can play Mystic Stride without an online account. When you do:

Clearing your browser’s data for our site deletes your offline progress and the game’s saved copy. We can’t restore your progress. Some browsers, like Amazon Fire tablet's Silk browser, may clear your data automatically (removing your progress) - this happens on our kids' tablets, and is one of the main reasons we started offering online accounts. In such cases, if your progress hasn't been synced online, it will be lost.

4. Playing Online (Optional)

Online play adds live races, leaderboards, Sanctuary visits and groups, and other features shared with other players. Your sharing of your runs and scores is off until online play it turned on. You can turn on online play only after reaching a point in the game and agreeing to our Terms of Service and this policy. Here is everything we keep for an online account:

WhatDetailsWhy
Account ID A random code made by our server. It isn’t linked to who you are, and is only used to attach your account to your runs and scores. To tell accounts apart.
Player name Two words picked from our curated, all-age-friendly lists plus a number, such as “BraveFox#42”. Custom names are not allowed. So players can recognize themselves and each other on leaderboards.
Avatar The guardian, cosmetics and background you pick from the game’s options. To show your character online.
Agreement record Which version of the Terms and this policy was agreed to, and when. To know which terms apply, and to ask again when they change.
Sign-ins For each signed-in device: a random sign-in token (we store only a scrambled “hash” of it, never the token itself), a device type such as “Fire tablet” or “iPhone” (worked out from the browser and kept as just those words), and when it was created, last used and expires. An account can be signed in on up to 10 devices. To keep you signed in, and to let you see and sign out your devices.
Sign-in pictures The four pictures you pick to sign in with, chosen from the game’s own pictures. We store only a scrambled (hashed) version made with a secret key, never the pictures themselves. Picking new pictures replaces the old ones. To sign you in on any device with your player name and pictures. We have no email or password to sign you in with.
Backup codes Codes made only when you ask for them on the Online Play screen, and shown to you once to save. We store only a scrambled (hashed) version. To get back into your account if you forget your sign-in pictures. We have no email to recover it with.
Runs and scores For each run you finish online: the level, score, distance, essence, stars, hearts, hits, moves, steps, orbs, guardian, powers, game version, when it was played, and the run metadata (such as the movements and choices made during the run). For leaderboards, to check that scores are fair, and to show replays of runs (like our "Echo" features).
Game progress While online play is on: your progress (essence, stars, best scores, how many times you’ve played each level, guardians and their Powers, cosmetics and trails, music you’ve heard, and whether you’ve seen the tutorial) and your settings (such as sound, camera and screen settings, and whether error reports are on), but not your graphics quality, which each device keeps for itself. The names you give your guardians stay on your device. The first time a device plays online with your account, the progress already on it is kept with the account if the account has none yet. If the account already has progress, the account’s progress replaces the device’s, and the game keeps a copy of the device’s old progress in your browser’s storage. So your progress follows you to any device you sign in on, and what you do on each of your devices adds up.
Preset messages Where online features allow messages, only phrases from our fixed list (like “Hello!” or “Good game!”) can be sent. They are passed to the other players in the game. To let players safely communicate without leaking personal information.
Friends and blocks Who your friends are, friend requests you’ve sent and received, a record that you turned down a player’s request (which stops them asking again for 7 days), and players you’ve blocked (up to 200). A blocked player isn’t told. To let you add friends and play with them, and stop players you don’t want to hear from.
Online settings Whether players can send you friend requests, whether friends see when you’re online and what you’re playing, and whether friends can visit your Sanctuary. To do what you chose.
Online status While the game is connected: that you’re online, and where you are in the game (the Sanctuary, Endless, or which level). Kept only while you’re connected: it’s gone about 90 seconds after the game closes. To show your friends you’re online and what you’re playing, if you allow it.
Sanctuary visits and group play Who is in a visit and when they joined, and invites to one. While you play together, your guardian’s position, looks and preset messages are passed on to the others in the visit as they happen and not kept. A run you play while in a visit is kept for 7 hours, so others in the visit can watch it, even if they join late. To let friends visit and play together.
Fair-play checks For each run you send: which kind of browser engine it was played in (Chrome’s, Safari’s, Firefox’s or another, worked out from your browser and kept as just that), timing statistics on how it was played (such as actions per minute or other metrics that help us determine fairness), whether it passed our checks, when it began by our server’s clock (kept 48 hours, to check it was played in real time), and a checksum of the run (a scrambled summary of its moves) used to spot copies of other players’ runs. To check that scores are fair.

Signing up asks your device to solve a small puzzle behind the scenes that takes a few seconds. This slows down bots without a third-party “CAPTCHA” service that could track you. We don't expect our current measures to prevent sophisticated bots, but we'll continue to improve on our prevention measures over time without compromising on your privacy.

5. What Other Players Can See

When you play online, other players may see:

Leaderboards can be viewed by anyone who opens the game, whether or not they play online. Nothing else about your account is shown to other players.

6. Technical Information

IP Addresses

Every device on the internet has an IP address, and our servers need it to send the game back to you. Our online services use it for one more thing: to stop abuse, such as too many requests or attempts to guess codes. Before we store anything based on it, our server scrambles the address with a secret key (and shortens IPv6 addresses to their network part), so our databases and logs never hold your raw IP address. These scrambled records expire on their own within 24 hours. Some limits also count by account or player name (for example, wrong sign-in pictures tried for a name); those counts also expire on their own within 24 hours. Our hosting provider’s firewall also checks addresses to block attacks; we don’t keep its results.

The retention timelines noted above may be subject to temporary exceptions during investigations of abuse, breach, or policy violations: when abuse or other policy violations are suspected, we may take snapshots of data (including copies of scrambled data, IP addresses, and firewall results) during a period for the express and limited purpose of investigation. Any such data is then immediately removed following the conclusion of the investigation.

Server Logs

Our online services keep technical logs (for example, that a request failed) for 14 days to fix problems. They are set up so that sign-in tokens, codes, cookies and IP addresses are removed before anything is written.

Error Reports

We use Sentry, a service from Functional Software, Inc., to find out when the game crashes or hits an error, so that we can fix it more quickly. Given that the game is offered in any browser, on any device, there's a lot of variance in players' systems, making error reporting incredibly helpful. "It broke, help" in an email is generally not particularly helpful.

Sentry may use error reports only to provide its service to us, never for its own purposes, and we only work with providers who commit to that in writing.

Usage Statistics

We may count how the game is used, such as how many players finish a level or which graphics setting is picked most, to make it better. If we do, these statistics run on our own servers, not a third-party. They don’t use cookies, don’t follow you to other websites, don’t use device fingerprinting, and aren’t tied to your account. We only look at totals.

7. Cookies and Storage on Your Device

8. Videos and Links to Other Sites

Some release notes include videos hosted on YouTube. They are not loaded until you press play, and then they play in YouTube’s “privacy-enhanced mode”. Once a video starts, YouTube (owned by Google) can receive information such as your IP address and may store data on your device, under Google’s privacy policy. We recommend kids ask a grown-up before playing these videos.

The game also links to our source code website and lets you email us. Other websites have their own privacy policies.

9. How We Use Information

We use the information above only to:

We don’t use it for advertising, to build profiles of players, to contact players, or to train AI models.

10. Who We Share Information With

We don’t sell, rent or trade information about players. We share it only:

11. Children’s Privacy

Mystic Stride is meant for players of all ages, including children under 13. We designed it so that it doesn’t collect personal information from children:

If you believe a child has sent us personal information, for example in an email, contact us and we will delete it. If a child emails us, we use the address only to reply once, and then delete the email and address.

12. Your Choices and Rights

You, or a parent or guardian, can:

Depending on where you live (for example in the European Union, the United Kingdom, or U.S. states like California), you may have other rights, such as to access, correct, delete or move your data, or to object to how we use it. If so, we applaud your local governments for employing such protections for you, and hope they continue to extend those protections for you! We give these rights to everyone, wherever they live, as part of our core service offering. You may also contact us at any time to use your rights. We will not treat you differently for doing so. If you’re in the EU or UK, you can also complain to your local data protection authority.

Where EU or UK law applies, we use online account information because it’s needed to provide the online features you asked for, and technical and security information because we have a legitimate interest in keeping the game safe and working.

13. How Long We Keep Information

14. How We Protect Information

All connections to the game and our services are encrypted. Our databases are encrypted, aren’t reachable from the internet, and our online service can only read and write game data, not change how the database is set up. Sign-in tokens, sign-in pictures and backup codes are stored only as hashes, and network addresses only in scrambled form. Our team’s access to systems is limited to what’s needed. No system is perfectly secure, but if something ever went wrong that affected players, we would tell you and the authorities as the law requires.

15. Where Information Is Kept

Our online services, and the service providers who help us run them (including for error reports), store and process information in the United States or the European Union. When we offer both regions, your information is handled in whichever is usually nearest to where you connect from: for example, the EU if you connect from the EU, or the United States if you’re in Kansas. When we offer only one region, it’s handled there. Hosting in more than one region costs us more, so at times we may offer fewer regions to reduce costs; if we stop offering one, we’ll move the information kept there to a region we still offer, protected as this policy describes (with advance notice provided when possible). On its way to us, due to the nature of internet routing, traffic may pass through networks in other countries. Our team is based in the United States, so information kept in the EU may also be accessed from our networks in the US (and the networks through which our traffic is routed). Wherever your information is transferred, it’s protected as this policy describes, with the safeguards the law requires for such transfers.

16. Changes to This Policy

When we change this policy, we’ll update the date and version at the top. If you play online, the game will ask you to read and agree to the new version before you keep playing online. We won’t start collecting new kinds of personal information from children without first changing this policy and getting any permission the law requires.

17. Contact Us

Questions, worries or requests about privacy are welcome, from players and grown-ups alike: