Privacy Notice
Last updated 28 October 2026
Who is responsible. Mitos is run by Stephen Paterson, who is the controller of your personal data. Contact: [email protected].
What we collect, and why
- Account details (name, email, organisation, sign-in method): to provide your account. Lawful basis: contract.
- Error reports: if the app crashes, a report with the app version, browser and technical details is sent to help us fix it. Drawing contents are stripped. Lawful basis: legitimate interests.
- Usage counts: privacy-friendly visit statistics for the website, without advertising cookies. Lawful basis: legitimate interests.
- Feedback and support messages you send us. Lawful basis: legitimate interests.
- Shared drawings: only if you create a share link, a read-only copy until you revoke it. Lawful basis: contract.
What we don't collect. Your designs are never uploaded (unless you share one), and we don't sell personal data or use advertising trackers.
Who processes data for us
- Clerk (sign-in and accounts), Cloudflare (website delivery and security), Sentry (error reports), Hetzner (hosting, EU). Where data is processed outside the UK, we rely on appropriate safeguards such as the UK International Data Transfer Addendum or adequacy regulations.
How long we keep it. Account data while your account is open and for up to 30 days after closure; error reports up to 90 days.
Your rights. You can ask to access, correct, delete or export your data, or object to processing, by emailing [email protected]. You can also complain to the Information Commissioner's Office (ico.org.uk).
Cookies. We use only cookies needed for signing in and security. No advertising cookies.
Changes. We'll update this page and the date above, and tell account holders about significant changes.