Privacy Policy

MythPets is an online store for Adopt Me items. We are responsible for the personal information described in this policy. You can reach us about anything in it at mythpetsofficials@gmail.com.

When you create an account

• Your name and email address.
• Your password, stored only as a one-way hash. We cannot see or recover the password itself.
• If you sign in with Google: the name and email address on your Google account, and Google’s confirmation that the email is verified. We never receive your Google password.

When you place an order

• The Roblox username you want the item delivered to.
• The items, prices and total of your order.
• The payment method you chose, the exact amount quoted, and the transaction ID you submit.

When you contact us or leave a review

• The name, email and message you send through the contact form.
• Your name, rating and comment on a review. Reviews are shown publicly on the site.

Automatically

• Your IP address, briefly, to rate-limit sign-in and password reset attempts.
• A session cookie that keeps you signed in.

• To fulfil your orders: verifying payment and delivering items to your Roblox username.
• To run your account: signing you in, showing your order history, and sending password reset links.
• To contact you about your order: including a welcome email when you register, and replies to your messages.
• To keep the store safe: preventing fraud, abuse, and attempts to claim payments that are not yours.
• To meet legal obligations: such as keeping records of sales.

We keep this to what the site needs to work:

• Session cookie: keeps you signed in. Without it you could not use your account.
• Sign-in security cookies: short-lived cookies used only while signing in, to protect against forged requests.
• Your cart: saved in your browser’s local storage, on your device, not on our servers.

We do not use advertising cookies, and we do not track you across other websites.

We do not sell your personal information, and we do not share it for advertising. We use a small number of service providers, who process data only to provide their service to us:

We may also disclose information if the law requires it, to protect our customers or the store from fraud, or as part of a sale or transfer of the business, in which case this policy would continue to apply.

Cryptocurrency payments are recorded on a public blockchain. Anyone can see a transaction, its amount and the wallet addresses involved, and that record is permanent.

This is how the networks work, not something MythPets controls. We cannot edit or delete information on a blockchain, even if we delete your account. We never publish a link between your wallet and your MythPets account.

• Account details: for as long as your account is open.
• Orders: for as long as we need them for accounting, dispute resolution and fraud prevention, even after an account is closed.
• Password reset links: expire after 10 minutes and work only once.
• Rate-limiting data: your IP address is kept for about a minute.
• Contact messages: for as long as needed to deal with your enquiry.

• All traffic to the site is encrypted with HTTPS.
• Passwords are stored as one-way hashes, never in readable form.
• Password reset links are stored as hashes too, so a leaked database would not contain a working link.
• Sign-in and password reset are rate-limited against guessing and abuse.
• Access to customer data is limited to the people who need it to run the store.

No system is perfectly secure. If we ever become aware of a breach affecting your information, we will tell you promptly.

You can ask us to:

• tell you what personal information we hold about you, and give you a copy;
• correct information that is wrong;
• delete your account and personal information, except records we must keep by law or to resolve an open order or dispute;
• stop sending you any non-essential email.

Email mythpetsofficials@gmail.com from the address on your account. We may ask you to confirm your identity first, and we will respond within 30 days.

Many Roblox players are young, so we take this seriously. Buyers under 18 need permission from a parent or guardian, as set out in our Terms of Service.

We do not knowingly collect personal information from children under 13 without a parent’s consent. If you are a parent and believe your child has given us information, contact mythpetsofficials@gmail.com and we will delete it.

Our service providers may store and process information in countries other than yours, including in Europe. Wherever it is processed, we expect it to be protected as this policy describes.

We will update this policy when the way we handle information changes. The date at the top of the page shows the latest revision, and we will tell you on the site or by email about any change that materially affects you.