Effective August 3, 2026
This notice explains the information Mighty Project uses to provide and protect website accounts.
We store your email address, a one-way password hash, account status, activation and login dates, security tokens, administrator account actions, and limited technical information such as network addresses used to prevent abuse. We do not store readable account passwords.
We use this information to create and activate accounts, provide login and password recovery, operate support, and keep the service secure.
Railway provides website hosting, Resend delivers account emails, Google reCAPTCHA checks login and registration requests for abuse, Google Drive may store encrypted database backups, and Sentry may process limited technical error diagnostics when the website fails. Drive backups are encrypted before upload, and the separate encryption key is not sent to Google. Error reports are configured without request bodies, account emails, passwords, cookies, security tokens, network addresses, or local variable values. These providers process information only as needed to operate and secure the website. Mighty Project does not sell personal information.
Account information is retained while the account is active or as needed for security and legal obligations. Verified database backups are created every 24 hours. The newest 14 Railway copies and, when off-site protection is enabled, the newest 30 active encrypted Google Drive copies are retained. Older Drive copies are moved to Trash, where Google permanently deletes them after 30 days. A deleted account may therefore remain in a protected backup until that copy expires. You may ask to access, correct, or delete your account information.
The account and administration areas use essential session cookies for authentication and security. The website does not currently use advertising cookies.
For privacy questions or account requests, email support@mightyproject.net or use the support page.