Privacy Policy

Your privacy matters. Mighty is built with a privacy-first approach — I collect as little data as possible. Analytics and crash reports are anonymous; paid licenses require limited purchase and activation data so I can fulfil, validate, and support Mighty Pro.

1. What I Collect

Mighty collects these data categories:

• Anonymous analytics — via PostHog, hosted in the EU (Frankfurt, Germany). This helps me understand how features are used so I can improve the app. No personally identifiable information is collected.
• Crash reports — via Sentry, hosted in the DE region (Germany). If Mighty crashes, an anonymous report is sent so I can diagnose and fix the issue. These reports contain technical information about the crash, not personal data.
• Purchase and license data — only if you buy Mighty Pro through Polar. Mighty stores the minimum license, order email, and activation records needed for license validation, support, refunds, and abuse prevention.
• Device data — Mighty reads the local mouse information needed to display battery status and apply settings, such as device name, vendor/product identifiers, connection state, battery level, DPI, polling-rate, button, and profile settings. This device data is processed locally unless you choose to send diagnostics for support.

2. What I Do NOT Collect

To be clear about what Mighty does not do:

• No account is required to use the free tier
• No user tracking or behavioral profiling
• No data is sold, shared, or used for advertising
• No third-party ad networks or trackers
• No keystrokes, file contents, browsing history, or personal documents
• No device data is sent to Logitech

3. Payment Data & Merchant of Record

If you purchase the Pro tier, Polar handles all payment processing as the Merchant of Record. This means Polar is the seller of record for your purchase, collects and remits applicable sales tax and EU VAT on my behalf, and is responsible for compliance with consumer-protection rules across all jurisdictions where Mighty is sold.

I do not receive, store, or have access to your payment details (credit card numbers, billing address, etc.). Polar is the data controller for your purchase data and processes it under their own privacy policy: polar.sh/legal/privacy. Their MoR + tax disclosures are published at polar.sh/legal/terms.

4. License Keys & Activation Data

When Polar issues you a license key for Mighty Pro, a webhook delivers the key, the email address you used at checkout, and the order metadata to my Cloudflare Worker (mighty-api) so I can fulfil and validate your license. I store the following on Cloudflare's EU edge:

• The license key string and its current state (active, expired, deactivated, refunded)
• The order email address (used only to look up your license if you contact support)
• A salted hash of each activated machine's hardware identifier — never the raw machine ID
• An audit log entry per webhook event (encrypted at rest with AES-256-GCM)

When the Mighty app calls /api/activate or /api/validate, those requests go to mighty-api. The Worker validates your license with Polar, but it never sees your card or full billing address. If you request a refund, the corresponding webhook revokes your license. Minimal order, license, activation, and audit records may be retained as needed for support, refund verification, tax/accounting records, and abuse prevention.

5. Cookies & Checkout

The Mighty website uses only essential cookies required for basic functionality. No tracking cookies, no third-party advertising cookies, no cookie consent popups needed.

The Polar checkout (whether embedded as an overlay or opened on a Polar domain) sets its own cookies that are required for the checkout to function and for fraud prevention. Those cookies are governed by Polar's privacy policy and only run on pages where you have actively initiated a purchase.

6. Data Retention

Anonymous analytics data is retained for up to 12 months and then automatically purged. Crash reports are retained for up to 90 days. License and order records are retained while needed to validate purchases, handle refunds, support customers, keep audit history, and meet legal or accounting obligations.

7. GDPR & International Customers

Mighty is built and operated from the EU (Greece). Both analytics (PostHog) and crash reporting (Sentry) are hosted within the EU/EEA. Since no personally identifiable information is collected by the app or this website, most GDPR data subject rights (access, deletion, portability) do not apply to that data set.

For Pro purchases, Polar is the data controller for the order, billing, and tax data required to issue your receipt. As an EU consumer you have the right to access, correct, and delete that data and to a 14-day right of withdrawal under EU consumer-protection law, subject to the exception for digital content delivered immediately after explicit consent — which is how Mighty Pro license keys are delivered. Polar applies the correct VAT rate for your country at checkout and remits it to the relevant tax authorities on my behalf; no additional VAT is charged by me. Refunds and chargebacks are described in the Refund Policy.

To exercise rights against my own (non-payment) processing — e.g. asking me to look up the email address attached to a license key and delete it — please contact me directly.

8. Children's Privacy

Mighty is not directed at children under 13. I do not knowingly collect data from children. Paid purchases and license management should be handled by an adult.

9. Changes to This Policy

I may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of Mighty constitutes acceptance of the revised policy.

10. Contact

Questions or concerns about this Privacy Policy? Reach out:

Michail Anargyros Zamagias
contact@mikezamayias.com
+30 693 900 0455
Kritovoulidou 19
71201 Heraklion, Crete, Greece