Protecting access and data
Mitosk applies server-side authentication and permissions to restrict access to accounts, organisations and administrative features. The website uses an HttpOnly, Secure session cookie: browser code cannot read its contents.
What happens when you create a world
Material you supply may be sent to AI providers to generate content and tutor responses. The process may retain inputs and private artefacts to complete or resume generation. AI-produced output may contain data from the material used; it is not automatically considered anonymous.
Controls and transparency
Technical measures and provider configuration must be checked in the environment where the service is delivered. We do not present an architecture or a test as an absolute security guarantee.
Before public launch, we are reviewing retention periods, deletion procedures and provider terms. You can find the status of that review in the Privacy Policy. Account deletion may be subject to retention obligations and the conditions applicable to published content.