Privacy Policy
Last updated: 29 October 2026
This policy explains what personal data Shieldwall Games Ltd ("Shieldwall", "we") collects when you use the Mimir app, your Mimir account and our website, why, who helps us, and your rights.
Who is responsible. Shieldwall Games Ltd, company number 12655497, 17 Chichester Road, Sandgate, Folkestone, Kent, CT20 3BN, United Kingdom, is the data controller. Contact: info@shieldwallgames.co.uk.
1. The local-first principle
Mimir keeps your worlds as files on your own computer. We do not receive a copy of a world because you create, open, edit, search, map or browse it in Mimir. Data leaves your computer only when you deliberately use a feature that needs an online service: your account, Mimir AI, the Marketplace, desktop and phone sync, collaboration, hosted Campaigns or Proving Grounds. Crash reports (section 2.6) are technical only and never contain your worlds.
2. What we collect, and why
2.1 Your account
Your email address, a password (stored only as a secure hash by our account provider), your account settings, your plan, your Mimir AI credit balance and use, packs you own, and security records such as sign-in times and the device session. Why: to run your account and give you what you paid for (contract). Security records: to protect your account (legitimate interests).
We count how many accounts use Mimir each month. We record only the account and the month, nothing about what you do or write. Why: to understand how many people use Mimir (legitimate interests).
2.2 Payments
Our payment provider, Stripe, collects your card details, billing address and payment history. We never see or store your full card number. We receive and keep a record of what you bought, when, the amount, and whether it was refunded. Why: to take payment and keep accounts (contract; legal obligation for tax records).
2.3 Mimir AI
When you ask Mimir AI something, Mimir sends your question and the parts of your world it needs to answer (not your whole world) through our server to our AI provider, Anthropic, and sends the answer back. We keep a record of each request's size and credit cost, not its content. Why: to provide the feature you asked for (contract). We do not use your content to train AI models, and our AI provider does not train on it.
2.4 Sync, collaboration, hosted Campaigns and Proving Grounds
If you choose to host or join a shared world, the content, the member list, roles and changes needed for it are stored online. If you turn on desktop and phone sync, the worlds you sync are kept with your account so your devices can exchange changes. Your other worlds stay local. Why: to provide the shared feature (contract).
2.5 Email
- Service email (sign-in codes, renewal reminders, billing notices, account deletion notices) is sent to the address on your account. You get these whatever your marketing choice, because they are about your account. Renewal reminders can be turned off in the app. Why: contract.
- Marketing email is optional. We send it only if you tick the box when creating your account (or join a list on our website), and we record when you agreed. You can turn it off any time in Account → Notifications, or with the link in any marketing email. Why: your consent.
2.6 Crash reports
If Mimir crashes or hits an error, it sends a short technical report to our error-reporting provider, Sentry (Functional Software, Inc.), so we can find and fix the problem. A report contains the type of error, where in Mimir's own code it happened, your Mimir version, and your operating system and its version. It never contains your worlds, entries, file or folder names, or anything you type, and we do not store your IP address with it. Crash reporting is on by default; you can switch it off at any time in Settings → Crash reports, after which nothing more is sent. Reports are kept for 90 days. Why: to keep Mimir working (legitimate interests).
2.7 Updates
When Mimir checks for or downloads an update, it contacts our download server, which (like any web server) sees your IP address and app version. Why: to keep Mimir up to date and secure (legitimate interests).
2.8 Support
If you email us, we keep the conversation and anything you choose to send (for example a problem report) to help you. A problem report Mimir prepares for you lists the screen, the message shown and your Mimir version, and you can read it before you send it. Why: legitimate interests, or contract when it is about something you bought.
2.9 Our website
Our website is hosted by GitHub Pages. GitHub keeps ordinary server logs, such as IP addresses, to run and protect the service. A cookie banner asks what you allow before anything optional runs: our sign-up forms (run by MailerLite) and, later, website analytics that count visits and pages read so we can improve the site and Mimir. See the Cookie Notice below. Why: legitimate interests (running the site); your consent (forms, analytics and mailing lists).
2.10 How you use Mimir (planned, only with your consent)
We plan to measure how features in the app and the website are used, such as which screens are opened and which tools are used, so we can improve them. This will only start with your consent: the website asks through its cookie banner, and the app will ask with a clear on and off switch in Settings. It will never include your worlds, entries or anything you write. We never sell this data or pass it to anyone except the providers that process it for us, who will be named on our Subprocessors page before it starts. Why: your consent.
2.11 Discord (when available)
Discord features are not yet available. When they are, connecting Discord will be optional and this policy will say exactly what Mimir receives.
3. Who helps us (subprocessors)
We use these providers to run Mimir. Each processes personal data only on our instructions and under a data processing agreement. The current list, with what each one handles, is at our Subprocessors page.
| Provider | What for | Where |
|---|---|---|
| Supabase | Accounts, sign-in, database for accounts and hosted worlds | United Kingdom (London) |
| Cloudflare | Mimir's servers, AI relay, update and pack downloads | Global network |
| Stripe | Payments, invoices, tax | Ireland and United States |
| Anthropic | Mimir AI answers | United States |
| MailerSend | Service email (sign-in codes, billing and account notices) | European Union |
| MailerLite | Marketing email, only if you opted in | European Union |
| Sentry | Crash reports | European Union (Germany) |
| Google Workspace | Our support inbox | United States and other countries |
| GitHub | Our website (GitHub Pages) | United States |
4. International transfers
Some providers process data outside the UK. Where they do, we rely on UK adequacy regulations or the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, as set out in each provider's data processing terms.
5. How long we keep it
| Data | Kept for |
|---|---|
| Account data | While your account exists. Deleted when you delete your account (30 days after you ask, so you can change your mind). |
| Payment and tax records | 6 years after the end of the financial year, as UK law requires. Kept no longer linked to your account after deletion. |
| Hosted world content | Until you delete it, or delete your account. |
| Service email records | 30 days, then the address and message details are removed. |
| Crash reports | 90 days. |
| Support emails | 2 years after the last message. |
| Marketing list membership | Until you unsubscribe. |
| Email fingerprint for starter credits | Indefinitely, see below. |
When you delete your account, we keep a scrambled fingerprint of your email address so that free starter credits can only be claimed once. The fingerprint cannot be reversed to recover your email address.
6. Your rights
You can ask to see the data we hold about you, correct it, delete it, restrict or object to how we use it, or receive it in a portable form. You can export your account data yourself from Account → Data & account, and delete your account from the same place. To use any other right, email info@shieldwallgames.co.uk. We reply within one month.
Where we rely on your consent (marketing email), you can withdraw it at any time.
If you are unhappy with how we handle your data, please tell us first. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk), or to your local data protection authority if you live in the EU.
7. Children
Mimir accounts are for people aged 13 and over. We do not knowingly collect data from children under 13. If you think a child has created an account, email us and we will delete it.
8. Security
Connections to our services are encrypted. Passwords are stored as secure hashes by our account provider. Access to personal data inside Shieldwall is limited to the people who need it to run Mimir. Your worlds are on your own computer, so their security also depends on your device.
9. Changes
We will update this policy when Mimir changes. We will tell you about important changes by email or in the app before they apply, and update the date at the top.
Cookie Notice
The website
Our website, shieldwallgames.co.uk, is hosted on GitHub Pages. GitHub keeps ordinary server logs (such as IP addresses) to run and protect the service.
When you first visit, a banner asks what you allow. Nothing optional runs until you choose, and "Reject all" is as easy as "Accept all".
| Category | Default | What it does |
|---|---|---|
| Necessary | Always on | Remembers your cookie choice, in your browser's storage, for 12 months. |
| Sign-up forms | Off | Lets our mailing-list forms work. They are run by MailerLite, which may set its own cookies. See MailerLite's own cookie policy for the details. |
| Analytics | Off | Counts visits and which pages are read, so we can improve the website and Mimir. We will name the analytics provider here and on our Subprocessors page before it is switched on. |
We do not use advertising cookies, and we never sell or pass on what we learn. You can change your choice at any time with Cookie settings at the bottom of every page, or by clearing your browser's storage.
The Mimir app
The Mimir desktop app does not use cookies. It stores your settings and your sign-in on your own computer, which it needs to work.
Crash reports are described in our Privacy Policy and can be switched off in Settings → Crash reports.
In future we plan to measure how features in the app are used, so we can improve them. That will only happen if you agree: Mimir will ask you, with a clear on and off switch in Settings, and it will never include your worlds or anything you write. We will update this notice and our Privacy Policy before it starts.
The service emails we send
Our service emails contain no tracking pixels and no tracked links.
Questions: info@shieldwallgames.co.uk.