Data Usage Policy

Last updated: July 2026

1. Overview

This Data Usage Policy explains how Myth Smiths' Supplies collects, processes, stores, and uses personal data. This policy applies to all data processed through our websites (mythsmiths.co.uk and dungeon-builder.mythsmiths.co.uk), our online stores, and any other channels through which we operate.

2. Data We Collect

  • Order Data: Name, shipping address, billing information, and email address provided when placing an order.
  • Account Data: Email address provided when creating an account on Dungeon Builder.
  • Usage Data: Dungeon designs, saved projects, user preferences, feature interactions, and session data within the Dungeon Builder application.
  • Communication Data: Emails, messages, and any correspondence sent to us.
  • Website Analytics: Anonymised data including page views, session duration, and referral sources across all our websites (if analytics tools are enabled).

3. How We Use Data

  • To process and deliver your orders accurately.
  • To provide, maintain, and improve the Dungeon Builder service.
  • To respond to enquiries and provide customer support.
  • To improve our products, services, and website experience.
  • To comply with tax, accounting, and legal obligations.

4. Data Storage & Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Order-related data is retained for a minimum of six years to comply with UK tax regulations. You may request deletion of non-essential data at any time.

5. Data Processors

We engage trusted third-party processors to handle personal data on our behalf for specific operational purposes. These processors are contractually obligated to process personal data only in accordance with our instructions, to implement appropriate security measures, and to delete or return personal data once the processing relationship ends. Our current data processors include:

  • Payment Processing: Stripe.
  • Hosting and Deployment: Vercel.
  • Database Hosting: Neon.
  • Email Delivery: Resend.

6. Third Party Services

In addition to our data processors, we utilise external platforms and service providers that operate as independent data controllers. We may share relevant personal data, such as name, delivery address, or order details, with these third parties as needed to provide our services (e.g., fulfil an order or process a payment). Once shared, that data is governed by the third party's own privacy practices, not ours.

Our current third party services include:

7. Cookies

Dungeon Builder (dungeon-builder.mythsmiths.co.uk) uses JWT-based authentication cookies to manage your session and maintain your login state. These cookies are strictly necessary for the service to function and are not used for tracking or analytics purposes. The main Myth Smiths' Supplies website (mythsmiths.co.uk) does not currently use cookies, analytics tools, or tracking pixels. Should any analytics or tracking technologies be introduced in the future, this policy will be updated and appropriate consent mechanisms will be provided.

8. Contact Us

For any questions about this Data Usage Policy, please contact us at info@mythsmiths.co.uk.