Privacy Policy

1. We and your Host have different roles

We operate Mythic Gathering. Your Host operates the event you register for. Each is responsible for the information it handles.

We determine how information is used for platform accounts, software billing, security, support, and other operations.

For some registration and event-management activities, we process information on a Host’s behalf and instructions. The Host is responsible for its independent uses, including its event communications, forms, exports, and marketing.

This Policy explains our practices. It does not replace a Host’s privacy notice or authorize a Host to use your information for any purpose it chooses.

2. Information we receive

What we collect depends on which services you use.

Information may include:

• Accounts and businesses: Names, email addresses, login identifiers, organization details, staff roles, subscriptions, and preferences.
• Registrations and payments: Purchaser and attendee details, tickets, dates, quantities, prices, taxes, fees, payment status, refunds, disputes, and check-in records.
• Forms and content: Listings, images, signatures, waiver acknowledgments, guardian information, and permitted answers supplied for an event.
• Communications and assistance: Support requests, messages, AI prompts, generated content, and relevant service context.
• Technical activity: IP addresses, browser and device information, app versions, interactions, cookies, diagnostics, and security logs.

We receive information from you, Hosts and authorized staff, service providers, and integrations you choose to use.

Stripe handles payment-card and connected-account information. In our normal Stripe-hosted and Terminal flows, we receive transaction details and identifiers rather than complete payment-card numbers.

Please avoid placing unnecessary sensitive information in free-text fields, support messages, or AI tools.

3. Why we use information

We use information to deliver the service you requested and keep it operating.

This includes creating accounts; displaying listings; handling registrations, tickets, waivers, and check-in; supporting Host operations; administering subscriptions and fees; maintaining transaction records; and responding to questions.

We also use information to diagnose problems, improve services, prevent fraud, secure accounts, comply with law, enforce agreements, and resolve disputes.

We send transactional messages such as receipts, registration confirmations, and security notices. We may send our own marketing where permitted, with an unsubscribe option. We do not use a Host’s Guest list for unrelated marketing by Mythic Innovations LLC without an independent lawful basis and required permissions.

When AI features are enabled, submitted content and relevant context may be used to provide the requested assistance. Some insights are calculated from operational data without generative AI. Automated assistance does not make final refund, account-termination, fraud, safety, or legal-compliance decisions.

4. Who receives information

Hosts receive what they need for their events. Service providers receive information needed to help us deliver the platform.

Hosts and authorized staff

Hosts and authorized staff may receive registration details, attendee information, relevant form and waiver responses, and check-in records. Contact the Host about its independent use of those records.

Service providers

We use service providers for hosting, data storage, account authentication, email delivery, customer support, enabled AI features, and applicable app or device functions. We disclose information as needed for those services and require appropriate protections where providers process personal information on our behalf.

Stripe processes payments and related payment-account information. Its handling of that information is also governed by its applicable privacy notices and agreements.

When you use an AI feature, your submitted content and relevant context may be sent to an AI service provider to generate a response. Submit only information you are authorized to share. Provider processing and retention depend on the service and applicable agreements; we do not promise that AI submissions have zero retention.

Other disclosures

Information may also be disclosed through exports or integrations you authorize; as reasonably necessary for legal obligations, security, fraud prevention, or protection of rights; or in connection with a merger, acquisition, or similar business transaction with appropriate safeguards.

We do not currently sell personal information or share it for cross-context behavioral advertising. Our current platform does not use advertising pixels, cross-context advertising SDKs, facial recognition, or biometric identification.

5. Cookies and device permissions

Some storage is needed for the service to work. Other choices are yours to manage.

Essential cookies and similar storage support login, security, checkout, and requested functions. Preferences may remember your selections. Optional analytics are off unless you opt in.

Manage available choices at mythicgathering.com/cookie-settings or through the cookie banner. Browser restrictions may affect functionality. We honor legally applicable privacy choices and signals as required.

Where enabled, mobile apps may request camera access to scan tickets. Optional browser location access may help find nearby events; ordinary check-in does not require location access. Authorized staff devices may retain limited information for offline operation and synchronize it later.

You can manage permissions through your browser or device settings.

6. Retention and deletion

We keep information for its purpose, not simply because we have collected it. Some records need to remain after an account closes.

Retention depends on service needs, legal obligations, fraud prevention, security, and disputes. Our typical periods include:

• Transaction, dispute, and legally significant acceptance records: Generally seven years, including relevant waiver records.
• Routine audit and security logs: Generally 24 months.
• Abandoned drafts in active accounts: Generally 90 days.
• Unused Host drafts after paid or trial access ends: Generally a 30-day resubscription period, subject to continuing service needs.
• Temporary automated support-chat history: Generally seven days.

Support tickets remain as needed to handle the request and related issues. Legal holds and other lawful requirements may extend retention for relevant information, including some records involving minors.

Following an eligible deletion request, we delete or de-identify information that no longer needs to be retained. Backup copies expire through backup processes rather than disappearing immediately. Properly de-identified aggregate information may remain longer.

Hosts and Stripe may retain their own records under their separate obligations.

7. Your choices and requests

You can ask about your information, request changes, or request deletion.

Update available information in your account, unsubscribe from marketing, and manage cookie and device permissions through the relevant controls.

Request account deletion at https://mythicgathering.com/player/manage/delete-account or email legal@mythicinnovations.com.

Depending on your location and applicable law, you may have rights to access, correct, delete, or obtain a portable copy of information; withdraw consent; or restrict or opt out of certain processing.

We may verify identity and authority using information proportionate to the request. Authorized agents may act where permitted. We respond within applicable legal deadlines and explain a permitted extension or denial. We do not unlawfully discriminate against anyone for exercising privacy rights.

Where an appeal is available, email legal@mythicinnovations.com with “Privacy appeal” and identify the decision. You may also contact the relevant privacy regulator.

If information is controlled by a Host, we may direct or forward the request to that Host and assist as required.

Canceling a subscription and deleting an account are different actions. The Terms of Service explain subscription cancellation and responsibilities associated with outstanding registrations.

8. Children and family registrations

A child may attend an eligible event without independently creating a Mythic Gathering account.

Children under 13 may not create accounts or submit information directly. A parent or legal guardian must manage permitted registrations and provide only information reasonably needed for participation.

Hosts are responsible for appropriate notices and permissions when collecting information about children. Contact legal@mythicinnovations.com if you believe a child has submitted information directly contrary to this Policy so we can investigate and address it.

9. Security and updates

We use safeguards to protect information, but no online service is completely secure.

Our administrative, technical, and organizational safeguards are intended to protect information within our control. Protect your credentials and devices, and report suspected unauthorized access to support@mythicinnovations.com.

We may update this Policy when services or practices change. We will post the revised date and provide additional notice or obtain consent where required.

Mythic Innovations LLC — operator of Mythic Gathering. Privacy questions and requests: legal@mythicinnovations.com. Support: support@mythicinnovations.com. Mailing address: [Insert verified business mailing address].