Privacy Policy
Mystic Stride · Last updated November 3, 2026 · Version 2026-11-03
The Short Version
Mystic Stride is made for players of every age, including kids - in fact, our own kids came up with the story and much of the design of the game and functionality! We're building a game they want to play! Given, then, that this is largely a "by kids, for kids" sort of project, we've built Mystic Stride specifically with our (and your) kids' privacy at top of mind.
- We never ask for your real name, email, phone number, address, birthday, photos or location. We may in the future ask for your preferred language so we can offer translation options for you.
- There are no third-party ads, and we never sell, rent, or give away information about you.
- You can play without going online at all. While offline, your progress stays on your device. If you turn online play on, your progress is also kept with your online account, so you can login and resume on another device.
- If you choose to play online, your player name is made from words in a preset list, so it can’t give away who you are. Other players can only send you messages from a short list we wrote, like “Good luck!”
- You can delete your account at any time, and your parent or legal guardian can ask us to delete your online account at any time.
- If something in the game breaks, it sends us a short error report so we can fix it. Reports never include your player name, your account ID or where you are. If you’re signed in to an online account, they carry a scrambled code instead, which changes every month. They’re on unless you turn them off, which you can do at any time in Settings, under Other.
If you’re a kid, please read this with a parent or legal guardian.
1. Who We Are
Mystic Stride (the “game”) is made by Adieuu, LLC (“Adieuu”, “we”, “us”). This policy explains what information the game and its online services handle, why, and the choices you have. It covers the game wherever you play it in a web browser, and our online services.
Contact us about privacy at any time:
- Email: mysticstride@adieuu.com
- Mail: Adieuu, LLC, 1617 Park Place Ave, Suite 110 PMB AD, Fort Worth, TX 76110, USA
2. Our Approach
Protecting players, especially children, comes first. Our own kids have designed and play this game, and we’re serious about protecting them: those protections are built into every aspect of the game and our services. We follow these core tenets:
- Collect as little as possible. If the game doesn’t need something to work, we don’t collect it.
- No personal information. We don’t ask for, and the game has no place to type, a real name, email address, phone number, home address, school, birthday, photo, voice or video. We may in the future ask for your preferred language so we can offer translation options for you (we currently only support English).
- No free-text user content. Players can’t type custom messages to each other - we have a preset list of messages that can be sent. Player names are built from curated word lists we've reviewed and chosen to ensure they're appropriate for all ages.
- No ads and no advertising trackers. We don’t show ads, don’t use advertising or social-media trackers, and don’t intentionally build profiles of players. The most we can know about a player is their player name and avatar, their game progress and settings, their runs, their scores and ranks on leaderboards, and who their friends are and who they’ve blocked: this is all stored in service of the game itself (we can't offer leaderboards, replays, or races without storing the data they need), or to provide convenience to the player (such as storing your preference and essence so that you can login and resume on another device).
- No selling or sharing for advertising. We never sell, rent or trade information about players.
- Offline by default. Online play is off until a player chooses to turn it on. You can delete your account at any time, and your parent or legal guardian can ask us to delete your online account at any time.
3. Playing Offline
You can play Mystic Stride without an online account. When you do:
- Your progress (levels, stars, essence, guardians, cosmetics) and your settings (sound, graphics, controls) are saved only in your browser’s storage on your device. We can’t see them. If you turn online play on, they’re also kept with your online account (see section 4).
- Your device downloads the game, its music and sounds, and release notes from our website, and checks now and then whether a newer version is available. These requests don’t include anything about you or your progress. We don’t turn on authenticated access logs for these downloads (see below note on hosting provider logs).
- Your browser keeps a copy of the game’s files on your device, so the game can start and play without an internet connection, and so you can add it to your home screen like an app. These are the game’s own files, the same for every player. They don’t include anything about you.
- Like any website, our hosting provider sees your device’s IP address in order to deliver the game to it. See section 6. Our logs on our hosting provider may include your IP address in relation to our networking and security layers: logs are not stored indefinitely, and they are not linked to your game profile.
Clearing your browser’s data for our site deletes your offline progress and the game’s saved copy. We can’t restore your progress. Some browsers, like Amazon Fire tablet's Silk browser, may clear your data automatically (removing your progress) - this happens on our kids' tablets, and is one of the main reasons we started offering online accounts. In such cases, if your progress hasn't been synced online, it will be lost.
4. Playing Online (Optional)
Online play adds live races, leaderboards, Sanctuary visits and groups, and other features shared with other players. Your sharing of your runs and scores is off until online play it turned on. You can turn on online play only after reaching a point in the game and agreeing to our Terms of Service and this policy. Here is everything we keep for an online account:
| What | Details | Why |
|---|---|---|
| Account ID | A random code made by our server. It isn’t linked to who you are, and is only used to attach your account to your runs and scores. | To tell accounts apart. |
| Player name | Two words picked from our curated, all-age-friendly lists plus a number, such as “BraveFox#42”. Custom names are not allowed. | So players can recognize themselves and each other on leaderboards. |
| Avatar | The guardian, cosmetics and background you pick from the game’s options. | To show your character online. |
| Agreement record | Which version of the Terms and this policy was agreed to, and when. | To know which terms apply, and to ask again when they change. |
| Sign-ins | For each signed-in device: a random sign-in token (we store only a scrambled “hash” of it, never the token itself), a device type such as “Fire tablet” or “iPhone” (worked out from the browser and kept as just those words), and when it was created, last used and expires. An account can be signed in on up to 10 devices. | To keep you signed in, and to let you see and sign out your devices. |
| Sign-in pictures | The four pictures you pick to sign in with, chosen from the game’s own pictures. We store only a scrambled (hashed) version made with a secret key, never the pictures themselves. Picking new pictures replaces the old ones. | To sign you in on any device with your player name and pictures. We have no email or password to sign you in with. |
| Backup codes | Codes made only when you ask for them on the Online Play screen, and shown to you once to save. We store only a scrambled (hashed) version. | To get back into your account if you forget your sign-in pictures. We have no email to recover it with. |
| Runs and scores | For each run you finish online: the level, score, distance, essence, stars, hearts, hits, moves, steps, orbs, guardian, powers, game version, when it was played, and the run metadata (such as the movements and choices made during the run). | For leaderboards, to check that scores are fair, and to show replays of runs (like our "Echo" features). |
| Game progress | While online play is on: your progress (essence, stars, best scores, how many times you’ve played each level, guardians and their Powers, cosmetics and trails, music you’ve heard, and whether you’ve seen the tutorial) and your settings (such as sound, camera and screen settings, and whether error reports are on), but not your graphics quality, which each device keeps for itself. The names you give your guardians stay on your device. The first time a device plays online with your account, the progress already on it is kept with the account if the account has none yet. If the account already has progress, the account’s progress replaces the device’s, and the game keeps a copy of the device’s old progress in your browser’s storage. | So your progress follows you to any device you sign in on, and what you do on each of your devices adds up. |
| Preset messages | Where online features allow messages, only phrases from our fixed list (like “Hello!” or “Good game!”) can be sent. They are passed to the other players in the game. | To let players safely communicate without leaking personal information. |
| Friends and blocks | Who your friends are, friend requests you’ve sent and received, a record that you turned down a player’s request (which stops them asking again for 7 days), and players you’ve blocked (up to 200). A blocked player isn’t told. | To let you add friends and play with them, and stop players you don’t want to hear from. |
| Online settings | Whether players can send you friend requests, whether friends see when you’re online and what you’re playing, and whether friends can visit your Sanctuary. | To do what you chose. |
| Online status | While the game is connected: that you’re online, and where you are in the game (the Sanctuary, Endless, or which level). Kept only while you’re connected: it’s gone about 90 seconds after the game closes. | To show your friends you’re online and what you’re playing, if you allow it. |
| Sanctuary visits and group play | Who is in a visit and when they joined, and invites to one. While you play together, your guardian’s position, looks and preset messages are passed on to the others in the visit as they happen and not kept. A run you play while in a visit is kept for 7 hours, so others in the visit can watch it, even if they join late. | To let friends visit and play together. |
| Fair-play checks | For each run you send: which kind of browser engine it was played in (Chrome’s, Safari’s, Firefox’s or another, worked out from your browser and kept as just that), timing statistics on how it was played (such as actions per minute or other metrics that help us determine fairness), whether it passed our checks, when it began by our server’s clock (kept 48 hours, to check it was played in real time), and a checksum of the run (a scrambled summary of its moves) used to spot copies of other players’ runs. | To check that scores are fair. |
Signing up asks your device to solve a small puzzle behind the scenes that takes a few seconds. This slows down bots without a third-party “CAPTCHA” service that could track you. We don't expect our current measures to prevent sophisticated bots, but we'll continue to improve on our prevention measures over time without compromising on your privacy.
5. What Other Players Can See
When you play online, other players may see:
- your player name and avatar,
- your scores and ranks on leaderboards,
- replays ("echoes") of your runs,
- preset messages you send,
- when searching for players by name: your player name, avatar, and whether you accept friend requests,
- your friends, if you allow it in Online Play’s friend options: when you’re online and what you’re playing, and
- friends in a Sanctuary visit with you: your guardian and where it moves, whether you’re in the Sanctuary or a run, and runs you play while in the visit, as you play them.
Leaderboards can be viewed by anyone who opens the game, whether or not they play online. Nothing else about your account is shown to other players.
6. Technical Information
IP Addresses
Every device on the internet has an IP address, and our servers need it to send the game back to you. Our online services use it for one more thing: to stop abuse, such as too many requests or attempts to guess codes. Before we store anything based on it, our server scrambles the address with a secret key (and shortens IPv6 addresses to their network part), so our databases and logs never hold your raw IP address. These scrambled records expire on their own within 24 hours. Some limits also count by account or player name (for example, wrong sign-in pictures tried for a name); those counts also expire on their own within 24 hours. Our hosting provider’s firewall also checks addresses to block attacks; we don’t keep its results.
The retention timelines noted above may be subject to temporary exceptions during investigations of abuse, breach, or policy violations: when abuse or other policy violations are suspected, we may take snapshots of data (including copies of scrambled data, IP addresses, and firewall results) during a period for the express and limited purpose of investigation. Any such data is then immediately removed following the conclusion of the investigation.
Server Logs
Our online services keep technical logs (for example, that a request failed) for 14 days to fix problems. They are set up so that sign-in tokens, codes, cookies and IP addresses are removed before anything is written.
Error Reports
We use Sentry, a service from Functional Software, Inc., to find out when the game crashes or hits an error, so that we can fix it more quickly. Given that the game is offered in any browser, on any device, there's a lot of variance in players' systems, making error reporting incredibly helpful. "It broke, help" in an email is generally not particularly helpful.
- Error reporting defaults to on and >can be turned off any time. Error reports are on when you start playing. You, or a parent or guardian, can turn them off at any time in the game’s Settings, under Other (“Send error reports”). While online play is on, this setting is kept with your account like your other settings, so changing it on one device changes it on your other devices the next time they play online. While they’re off, the game sends no error reports at all. Turning them back on only affects errors from then on.
- An error report contains: What went wrong (the error’s name and message), where in the game’s code it happened, the game version, your browser’s name and main version number (such as “Chrome 120”), and your device type (such as “Fire tablet”). Reports do not intentionally include any IP or other potential PII, but out of an abundance of caution we pass report data through an additional scrubbing layer before sending it along to Sentry, and Sentry further performs their own scrubbing passes before processing a report.
- If you’re signed in to an online account (even with online play turned off), a report also carries a scrambled code made from your account, so we can tell whether a problem is hitting one player or many. The code isn’t your account ID or player name, and Sentry can’t work out who you are from it. Only Adieuu can match it to an account, and we do that only to look into a problem (for example, it's extremely helpful to know if 10 new errors are occurring on just one player vs 10 unique players. If the former, it may actually only be 1 or 2 errors that then cause the other 8-9 errors. This changes our investigation and can save a lot of time and headache for both us and players). The scrambled ID code changes every month, so reports can’t be linked up over a longer time.
- What a report never contains: your IP address, your player name or account ID, your progress, what you do in the game, or anything from your screen. Reports go first to our own servers, which take out your IP address and the rest of your browser’s details (all but its name and main version number) before passing them on to Sentry. Your device never connects to Sentry, and Sentry sets no cookies.
- How long they’re kept. Sentry deletes reports automatically after no more than 90 days.
Sentry may use error reports only to provide its service to us, never for its own purposes, and we only work with providers who commit to that in writing.
Usage Statistics
We may count how the game is used, such as how many players finish a level or which graphics setting is picked most, to make it better. If we do, these statistics run on our own servers, not a third-party. They don’t use cookies, don’t follow you to other websites, don’t use device fingerprinting, and aren’t tied to your account. We only look at totals.
7. Cookies and Storage on Your Device
- One cookie, only for online play. When you sign in online, we set a single cookie that holds your sign-in token. It can only be read by our own server (not by scripts or other websites) and is used for nothing else.
- Browser storage. The game saves your progress and settings in your browser’s local or database storage, saves finished runs waiting to be uploaded in your browser’s database storage, keeps music it has downloaded so it doesn’t need to download it again, and keeps a copy of the game’s own files so it can start without an internet connection. If you tick “Remember my name on this device” when signing in, it also keeps your player name there, so you don’t have to type it next time; untick it to forget the name. While online play is on, it also keeps the account’s progress as it last received it, and if your account’s progress ever replaced the device’s, a copy of the device’s old progress. It never keeps your sign-in pictures. This all stays on your device.
- No advertising or tracking cookies, ours or anyone else’s.
8. Videos and Links to Other Sites
Some release notes include videos hosted on YouTube. They are not loaded until you press play, and then they play in YouTube’s “privacy-enhanced mode”. Once a video starts, YouTube (owned by Google) can receive information such as your IP address and may store data on your device, under Google’s privacy policy. We recommend kids ask a grown-up before playing these videos.
The game also links to our source code website and lets you email us. Other websites have their own privacy policies.
9. How We Use Information
We use the information above only to:
- run the game and its online features (accounts, sign-ins, keeping your progress across devices, leaderboards, races, visiting others' Sanctuaries, replays, messages),
- keep the game safe, fair and working (stopping cheating, spam and attacks, and fixing bugs),
- understand, in totals, how the game is played so we can improve it,
- answer you when you contact us, and
- follow the law.
We don’t use it for advertising, to build profiles of players, to contact players, or to train AI models.
10. Who We Share Information With
We don’t sell, rent or trade information about players. We share it only:
- With service providers who help us run the game, and only so they can do that for us: Amazon Web Services (hosting, databases and firewall) and Sentry (error reports; see Error Reports), in the regions described in Where Information Is Kept. They may not use it for anything else.
- If the law requires it, or when needed to protect the safety of a player or others.
- If Adieuu or the game changes owner. The new owner would have to protect it as this policy does, and we would tell players first.
11. Children’s Privacy
Mystic Stride is meant for players of all ages, including children under 13. We designed it so that it doesn’t collect personal information from children:
- We never ask for or allow children to share contact details, real names, photos, voice, location or other personal information.
- Player names come only from our word lists, sign-in pictures only from the game’s own pictures, and messages only from our fixed list, so children can’t share personal information through them.
- The only identifiers we use (the account ID, sign-in token, scrambled network information, and the scrambled monthly code in error reports) are used solely to run the game, keep accounts secure, stop abuse and fix errors, as the U.S. Children’s Online Privacy Protection Act (COPPA) allows for supporting the game’s internal operations. They are never used to contact a child, for advertising, or to build a profile, and the service providers who handle them for us may not use them for anything else.
If you believe a child has sent us personal information, for example in an email, contact us and we will delete it. If a child emails us, we use the address only to reply once, and then delete the email and address.
12. Your Choices and Rights
You, or a parent or guardian, can:
- Stay offline. Online play is optional and off by default.
- Turn online play off or sign out of any device from the game’s Online Play screen.
- Turn error reports off at any time in Settings, under Other. See Error Reports.
- See what we hold. Your account details are shown on the Online screen, and we’ll send a copy of everything we hold for the account on request.
- Correct it. You can change your player name and avatar in the game at any time.
- Delete it. Email mysticstride@adieuu.com with the player name. Because we hold no email or contact details for accounts, we’ll ask you to prove the account is yours, with its sign-in pictures or one of its backup codes. We then delete the account and everything tied to it, including its game progress, runs, scores and sign-ins, and stop collecting anything for it.
- Delete offline progress by clearing your browser’s data for our site.
Depending on where you live (for example in the European Union, the United Kingdom, or U.S. states like California), you may have other rights, such as to access, correct, delete or move your data, or to object to how we use it. If so, we applaud your local governments for employing such protections for you, and hope they continue to extend those protections for you! We give these rights to everyone, wherever they live, as part of our core service offering. You may also contact us at any time to use your rights. We will not treat you differently for doing so. If you’re in the EU or UK, you can also complain to your local data protection authority.
Where EU or UK law applies, we use online account information because it’s needed to provide the online features you asked for, and technical and security information because we have a legitimate interest in keeping the game safe and working.
13. How Long We Keep Information
- Online accounts are kept until the account is deleted, with their game progress and settings, friends, blocks, online settings and fair-play records. Turning online play off stops sending progress, but doesn’t delete what the account already has.
- Runs and scores: on each leaderboard we keep your best runs (and any run one of your best scores comes from) until the account is deleted. Other runs are deleted as better ones come in, and runs that fail our fair-play checks are deleted after 7 days.
- Online status lasts only while you’re connected. Sanctuary visits end when everyone leaves (or after 6 hours with nobody joining or moving on), invites after 30 minutes, and runs played in a visit are kept for 7 hours.
- Sign-ins expire after a year without use, and are removed when you sign out a device.
- Scrambled network records for stopping abuse last at most 24 hours. Server logs are kept for 14 days, and error reports for at most 90 days.
- Backups of our database are kept for 7 days, so deleted information is fully gone within 7 days.
- Emails to support are kept only as long as we need to help you, and are deleted at once if they’re from a child.
14. How We Protect Information
All connections to the game and our services are encrypted. Our databases are encrypted, aren’t reachable from the internet, and our online service can only read and write game data, not change how the database is set up. Sign-in tokens, sign-in pictures and backup codes are stored only as hashes, and network addresses only in scrambled form. Our team’s access to systems is limited to what’s needed. No system is perfectly secure, but if something ever went wrong that affected players, we would tell you and the authorities as the law requires.
15. Where Information Is Kept
Our online services, and the service providers who help us run them (including for error reports), store and process information in the United States or the European Union. When we offer both regions, your information is handled in whichever is usually nearest to where you connect from: for example, the EU if you connect from the EU, or the United States if you’re in Kansas. When we offer only one region, it’s handled there. Hosting in more than one region costs us more, so at times we may offer fewer regions to reduce costs; if we stop offering one, we’ll move the information kept there to a region we still offer, protected as this policy describes (with advance notice provided when possible). On its way to us, due to the nature of internet routing, traffic may pass through networks in other countries. Our team is based in the United States, so information kept in the EU may also be accessed from our networks in the US (and the networks through which our traffic is routed). Wherever your information is transferred, it’s protected as this policy describes, with the safeguards the law requires for such transfers.
16. Changes to This Policy
When we change this policy, we’ll update the date and version at the top. If you play online, the game will ask you to read and agree to the new version before you keep playing online. We won’t start collecting new kinds of personal information from children without first changing this policy and getting any permission the law requires.
17. Contact Us
Questions, worries or requests about privacy are welcome, from players and grown-ups alike:
- Email: mysticstride@adieuu.com
- Mail: Adieuu, LLC, 1617 Park Place Ave, Suite 110 PMB AD, Fort Worth, TX 76110, USA