Privacy Policy

Last updated: September 5, 2026

1. Introduction

Mystrix ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our interactive storytelling platform.

2. Information We Collect

Information You Provide

  • Account Information: Email address, display name, password
  • Profile Information: Bio, preferences, settings
  • Payment Information: Processed securely through our payment providers (Stripe, and PayPal where offered)
  • Communication: Support requests and feedback
  • Content You Create: Story inputs and messages you write during sessions, world chat messages, creator drafts, and any images, audio, or video you upload

Information Collected Automatically

  • Usage Data: Pages visited, features used, session interactions
  • Device Information: Browser type, operating system, device identifiers
  • Log Data: IP address, access times, referring URLs

3. How We Use Your Information

We use your information to:

  • Provide and maintain the Service
  • Process transactions and manage your account
  • Personalize your experience and content recommendations
  • Improve our Service and develop new features
  • Communicate with you about updates and support
  • Ensure safety and security of the platform
  • Comply with legal obligations

4. AI Processing of Your Content

When you play a story, ask our support assistant, chat in a world, or use our creator tools:

  • Reader story generation is primarily processed by MiniMax using MiniMax-M3. Groq is the configured distinct fallback for reader story generation. General platform text, including support questions and non-story world chat, remains processed on the Mystrix host through loopback-only Ollama. OpenAI, OpenRouter, and Alibaba Cloud (Qwen) remain approved hosted providers, but they are not part of the canonical reader route and receive platform-selected text only if deliberately selected and disclosed through the governed provider configuration. If a creator configures their own text-generation credential, authoring requests made with that credential are pinned to the creator-selected provider. Those requests do not fall through to the platform reader route.
  • Session transcripts are stored to enable resuming sessions
  • Aggregate, anonymized data may be used to improve AI quality
  • We do not use your personal interactions to train AI models on other users' content
  • For text sent to a third-party AI provider, we do not control whether that provider retains or trains on what it receives. That is governed by that provider's own terms.
  • If you turn on Story speech, the sanitized spoken blocks for one scene are synthesized as one continuous track by Mystrix's fixed, self-hosted CPU speech engine. Story speech is off unless you enable it. Spoken Story text is not sent to Microsoft or any other third-party speech provider, and synthesis failure remains fail closed rather than falling back to an external service.
  • During classifier-backed processing of images and videos you upload, a reduced image derivative or, for video, one extracted poster frame is sent to MiniMax for automated safety verification. MiniMax uses those pixels only to return safety scores; it does not generate or edit images. OpenAI does not receive those image derivatives or poster frames. A flagged result, unavailable verification, or classifier outage leaves the uploaded asset unavailable for Story application until human review records an explicit approval; rejection keeps it blocked. Only approved reviewed Creator uploads or approved reviewed house-owned assets can be applied. Automated verification is a moderation aid, not a guarantee that every problematic item is caught.
  • Mystrix does not generate or edit Story images. Only approved reviewed Creator uploads or approved reviewed house-owned images may be applied to eligible Story surfaces. Applying an already reviewed image is not image generation. MiniMax processes visual pixels only in the limited safety-verification path described above; it is never used to generate or edit an image.
  • An approved reviewed house-owned discovery or surface image may be reused when its visual specification, rights evidence, and safety review match. Creator-uploaded images remain under the creator's custody and are not turned into shared stock. Each applied full-frame scene image remains bound to the exact owning account, Story version, and event.

5. Information Sharing

We do not sell your personal information. We may share information with:

  • Service Providers: Third parties that help us operate. These are our payment processors (Stripe, and PayPal where offered), the AI providers described in section 4, MiniMax for upload safety verification, and Google for push notifications to our mobile apps. Story speech is synthesized by Mystrix's self-hosted CPU speech engine and is not shared with a third-party speech provider. We do not share your information with a third-party analytics provider; see section 9.
  • Creators: Aggregate, anonymized statistics about story performance
  • Legal Requirements: When required by law or to protect our rights
  • Business Transfers: In connection with a merger, acquisition, or sale of assets

6. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

  • Encryption of data in transit
  • Secure authentication systems
  • Regular security assessments
  • Access controls and monitoring

7. Data Retention

We retain your information for as long as your account is active or as needed to provide services. You may request deletion of your account and associated data at any time.

8. Your Rights

Depending on your location, you may have rights including:

  • Access to your personal information
  • Correction of inaccurate data
  • Deletion of your data
  • Data portability
  • Objection to processing
  • Withdrawal of consent

To exercise these rights, please contact us through our support system.

9. Cookies and Tracking

We use cookies and similar technologies to:

  • Maintain your session and authentication
  • Remember your preferences
  • Analyze usage patterns
  • Improve our Service

You can control cookies through your browser settings.

Our visitor analytics are self-hosted on our own servers. We do not use Google Analytics or any third-party analytics provider, and we do not sell or share visitor data. Analytics do not set a cookie: visitors are counted using a rotating one-way fingerprint that we cannot reverse to an IP address, and which stops being linkable to anyone within 24 hours. We honour the Do Not Track and Global Privacy Control browser signals — if your browser sends either, we record nothing at all.

10. Children's Privacy

Mystrix is not intended for children under 13. We do not knowingly collect information from children under 13. If we learn we have collected such information, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on the Service and updating the "Last updated" date.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us through our support system.