← Back to Mighty

Privacy policy

Last updated 5 October 2026

Mighty (playmighty.online) is a free card game made by one person. It keeps as little about you as it can. This page explains what it does keep, and why.

Playing without an account

You can play without signing up. When you join a table, the server keeps the name and picture you choose, your seat, the cards played and the table chat, for as long as the room is open. Rooms close by themselves when nobody is using them, and then this is deleted. The server also keeps a record of each finished hand for a short time, so you can review it.

Accounts

An account is optional. It lets your game stats follow you across devices and puts you on the leaderboard. For an account, the server stores:

• your username, which other players see on the leaderboard;
• if you use a password: a one-way hash of it, never the password itself;
• if you sign in with Google: Google’s ID number for your account. Not your email address, and nothing else from your Google account;
• your game stats, such as hands played and won, points, and contracts made;
• a hashed sign-in token for each device you’re signed in on.

Mighty uses Google sign-in only to confirm who you are. It doesn’t read your email, contacts or any other Google data.

Analytics

To see how the game is used and to fix problems, Mighty records anonymous usage events, such as “a game started” or “a hand finished”, with PostHog. These events are tied to a random ID made in your browser, not to your name or account. Session recording is off, and your IP address isn’t stored with them.

Feedback and bot reports

If you send feedback or report a bot’s move, your message and the hand it’s about are stored, so they can be read and used to improve the game. An email address is stored only if you choose to give one for a reply.

Notifications, voice and video

If you turn on notifications, the server keeps the address your browser gives it for sending them, until you turn them off. Voice and video calls go directly between players’ devices (sometimes through a relay that passes the data along), and they are never recorded.

On your device

Your browser keeps your name, picture, settings, practice games, score history and sign-in token in its local storage. Clearing your browser’s site data removes them. Mighty doesn’t use advertising or tracking cookies.

Who else handles data

• Oracle Cloud hosts the server.
• Google, if you sign in with Google.
• PostHog, for the anonymous analytics.
• Cloudflare, for the call relay when a direct connection isn’t possible.

Mighty doesn’t sell or share your data with anyone else, and shows no ads.

Deleting your data

To have your account and its stats deleted, email nehemiahkiv@gmail.com from any address and include your username. It will be done within 30 days. You can stop a Google sign-in at any time in your Google account’s security settings.

Children

Mighty isn’t aimed at children under 13, and accounts aren’t meant for them.

Changes

If this policy changes, the date above will change too. Questions: nehemiahkiv@gmail.com.