Effective: May 7, 2026
Your privacy matters. Mighty is built with a privacy-first approach — I collect as little data as possible, and what I do collect is anonymized. This policy explains what data is involved when you use Mighty.
Mighty collects only two types of anonymous, non-personal data:
To be clear about what Mighty does not do:
If you purchase the Pro tier, Lemon Squeezy handles all payment processing as the Merchant of Record. This means Lemon Squeezy is the seller of record for your purchase, collects and remits applicable sales tax and EU VAT on my behalf, and is responsible for compliance with consumer-protection rules across all jurisdictions where Mighty is sold.
I do not receive, store, or have access to your payment details (credit card numbers, billing address, etc.). Lemon Squeezy is the data controller for your purchase data and processes it under their own privacy policy: lemonsqueezy.com/privacy. Their MoR + tax disclosures are published at lemonsqueezy.com/legal/merchant-of-record.
When Lemon Squeezy issues you a license key for Mighty Pro, a webhook delivers the key, the email address you used at checkout, and the order metadata to my Cloudflare Worker (mighty-api) so I can fulfil and validate your license. I store the following on Cloudflare's EU edge:
When the Mighty app calls /v1/licenses/activate or /v1/licenses/validate, those requests go to Lemon Squeezy directly; my Worker never sees your card or full billing address. If you request a refund, the corresponding webhook revokes your license and the activation data is purged within 30 days.
The Mighty website uses only essential cookies required for basic functionality. No tracking cookies, no third-party advertising cookies, no cookie consent popups needed.
The Lemon Squeezy checkout (whether embedded as an overlay or opened on a Lemon Squeezy domain) sets its own cookies that are required for the checkout to function and for fraud prevention. Those cookies are governed by Lemon Squeezy's privacy policy and only run on pages where you have actively initiated a purchase.
Anonymous analytics data is retained for up to 12 months and then automatically purged. Crash reports are retained for up to 90 days. Since no personal data is collected, there is no personal data to retain or delete.
Mighty is built and operated from the EU (Greece). Both analytics (PostHog) and crash reporting (Sentry) are hosted within the EU/EEA. Since no personally identifiable information is collected by the app or this website, most GDPR data subject rights (access, deletion, portability) do not apply to that data set.
For Pro purchases, Lemon Squeezy is the data controller for the order, billing, and tax data required to issue your receipt. As an EU consumer you have the right to access, correct, and delete that data and to a 14-day right of withdrawal under EU consumer-protection law, subject to the exception for digital content delivered immediately after explicit consent — which is how Mighty Pro license keys are delivered. Lemon Squeezy applies the correct VAT rate for your country at checkout and remits it to the relevant tax authorities on my behalf; no additional VAT is charged by me. Refunds and chargebacks are described in the Refund Policy.
To exercise rights against my own (non-payment) processing — e.g. asking me to look up the email address attached to a license key and delete it — please contact me directly.
Mighty is not directed at children under 13. I do not knowingly collect data from children. Since no personal data is collected from any user, this is inherently addressed.
I may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of Mighty constitutes acceptance of the revised policy.
Questions or concerns about this Privacy Policy? Reach out:
Mike Zamagias
contact@mikezamayias.com
Heraklion, Greece