Legal
Privacy Policy
Last updated: October 22, 2026
Adam Hmouda, operating under the Mythspire name ("Mythspire", "we", "us", or "our"), is responsible for the personal information described in this policy. This policy explains how we collect and use information when you visit mythspire.co.
1. Information We Collect
Contact Form
When you submit a contact form, we collect your name, email address, and message content.
Newsletter
When you request newsletter emails, we collect your email address and record the consent wording version and time. A consent record keyed by a one-way hash of your email is stored with our rate-limiting data so we can evidence and manage your opt-in and unsubscribe.
Automatically Collected
We use your IP address temporarily to limit abusive requests.
Administrator Sign-In
If you sign in to the Mythspire administration area, Google provides your account identity and email address to authenticate you. The site checks the email against its authorised administrator list.
IP Display Feature
During certain interactive elements on our website, your IP address may be temporarily displayed on your screen for visual effect only. This is fetched directly by your browser from a third-party service (ipify.org) and is only shown to you. We do not collect, store, or transmit this information to our servers.
2. How We Use Your Information
- •Respond to your inquiries and messages
- •Send newsletter updates about Mythspire projects and announcements
- •Prevent abuse and protect the security of our services
- •Improve our website and user experience
2.1 Legal Bases for EEA and UK Processing
Where the GDPR or UK GDPR applies, we rely on these legal bases according to the purpose:
- Newsletter: your consent. You can withdraw it at any time using the unsubscribe link or by contacting us.
- Contact enquiries: our legitimate interests in responding to messages and managing correspondence; where you ask about a potential purchase, steps taken at your request before a contract.
- Administrator sign-in: our legitimate interests in authenticating authorised administrators and protecting the administration area.
- Security, abuse prevention, aggregated analytics and service reliability: our legitimate interests in protecting the site, customers and services and understanding aggregated site usage.
- Records required by law: compliance with applicable legal obligations.
Where we rely on legitimate interests, you can object using the contact details below. Withdrawing consent does not affect processing that took place before withdrawal.
3. Third-Party Services
We use the following third-party services to operate our website:
Resend
Email delivery service for contact form responses and newsletters. Resend receives the email addresses and message content needed to send these messages. See the Resend Privacy Policy for information about its handling of personal data.
Upstash
Rate limiting and newsletter consent records. Upstash temporarily stores IP addresses to prevent abusive requests and stores hashed newsletter email addresses to record consent and withdrawals.
Vercel
Website hosting and deployment platform. We also use Vercel Web Analytics, which provides aggregated website usage information without third-party tracking cookies.
Google provides sign-in for the restricted administration area and receives the authentication request and account information needed to verify an administrator.
ipify
Used for a visual display feature only. Your browser fetches your IP directly from this service; we do not receive or store it.
3.1 International Data Transfers
Our service providers may process personal information in countries other than the country where you live, including the United States. Where data protection law restricts an international transfer, we use a transfer mechanism available under the relevant provider terms, such as an adequacy decision or standard contractual clauses and, where required, supplementary safeguards. Contact us at official@mythspire.co to ask which safeguard applies to a particular provider or transfer.
4. Data Retention
- •Contact submissions: Retained for the duration of our correspondence with you
- •Newsletter emails and consent record: Your email remains active in the newsletter audience until you unsubscribe. After that, Resend keeps it as an unsubscribed contact so we can honour the opt-out; you can ask us to erase it. We retain the consent status while you are subscribed and keep a hashed-email consent or withdrawal record for up to three years after unsubscribe to demonstrate and enforce the opt-in; we do not use the withdrawn record to send marketing.
- •IP addresses: Temporarily stored for rate limiting purposes only (a few hours)
5. Your Rights
You have the right to:
- •Unsubscribe from our newsletter at any time
- •Request access to your personal data
- •Request deletion of your personal data
- •Request correction or restriction of processing, object to processing based on legitimate interests, and request portability where the law provides those rights
- •Contact us with any privacy-related questions
To exercise a right, email official@mythspire.co. You can also complain to the data protection supervisory authority where you live, work, or where you believe an infringement happened.
6. Cookies
Our website uses essential browser storage for basic functionality and administrator sign-in. Vercel Web Analytics does not use third-party tracking cookies.
7. Children's Privacy
Mythspire is not directed at children under 13. We do not knowingly collect personal information from children under 13 years of age. If you are a parent or guardian and believe your child has submitted personal information to us, please contact us at the email below and we will promptly delete it.
8. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
9. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at:
official@mythspire.co