Last Updated: May 9, 2022
Mythical is the data controller for the personal data collected in connection with use of Mythical's Services.
Mythical Marketplace. Mythical is the data controller for the personal data collected in connection with use of the Mythical Marketplace.
Blankos, and Other Games Developed by Us. Mythical is the data controller for the personal data collected in connection with your use of Blankos and other games developed by us.
The following data is collected by or on behalf of Mythical:
Mythical may combine the data collected from these sources with other data in its possession.
Mythical collects and uses data to provide its game sites and marketplace Services. We also use the data we collect:
Mythical does not sell or share user personal data with third parties for their direct marketing, except with users' consent.
Mythical uses the data it collects for purposes including:
Mythical uses the data we collect to provide, personalize, maintain, and improve our products and Services. This includes using the data to:
We use personal data to help maintain the safety, security, and integrity of our Services and users. This includes:
Mythical uses the information we collect (including recordings of customer support calls with notice to and the consent of the user) to provide customer support, including to:
We may use the data we collect for testing, research, analysis, product development, and machine learning to improve the user experience. This helps us to improve and enhance the safety and security of our Services, improve our ability to prevent the use of our Services for illegal or improper purposes, develop new features and products, and facilitate insurance and finance solutions in connection with our Services.
Mythical may use the data we collect to market our Services to our users. This includes sending users communications about Mythical games, Services, features, promotions, sweepstakes, studies, surveys, news, updates, and events.
We may use the data we collect to personalize the marketing communications (including advertisements) that we send, including based on user location, past use of Mythical's games and Services, and user preferences and settings.
Mythical may use the data we collect to inform users of changes to our terms, services, or policies; or send other communications that aren't for the purpose of marketing the services or products of Mythical or its partners.
We may use the personal data we collect to investigate or address claims or disputes relating to use of Mythical's Services, or as otherwise allowed by applicable law, or as requested by regulators, government entities, and official inquiries.
We use personal data to make automated decisions relating to use of our Services. This includes:
To object to a decision resulting from these processes, please contact us using the information in the "Contact Us" section below.
Some of Mythical's products, Services, and features require that we share data with other users or at a user's request. We may also share data with our affiliates, subsidiaries, and partners, for legal reasons or in connection with claims or disputes.
Mythical may share the data we collect:
We may share gameplay and other Mythical game-related data with other Mythical users during gameplay.
Certain data, such as your Mythical Marketplace public account information, and your ownership of NFTs, will be shared across games developed by Mythical and third-party games which integrate the Mythical Marketplace.
This includes sharing data with:
Questions or comments from users submitted through public forums such as Mythical blogs and Mythical social media pages may be viewable by the public, including any personal data included in the questions or comments submitted by a user.
We share data with our subsidiaries and affiliates to help us provide our Services or conduct data processing on our behalf.
Mythical provides data to vendors, consultants, marketing partners, research firms, and other service providers or business partners.
Some external service providers may also collect information directly from you (for example, an online wallet, cryptocurrency platform, or marketplace may request your government-issued identity document or billing and financial information) in accordance with their own privacy policies. These external service providers do not share your financial information or identity documents with us, but may share limited information with us related to your purchase or account, like a transaction ID.
Mythical may share users' personal data if we believe it's required by applicable law, regulation, operating license or agreement, legal process or governmental request, or where the disclosure is otherwise appropriate due to safety or similar concerns.
This also includes sharing personal data with others in connection with, or during negotiations of, any merger, sale of company assets, consolidation or restructuring, financing, or acquisition of all or a portion of our business by or into another company.
Mythical may share a user's personal data other than as described in this notice if we notify the user and they consent to the sharing.
We may also aggregate or otherwise strip information of all personally identifying characteristics and may share that aggregated, anonymized data with third parties or publish it. This data does not personally identify you and helps us to measure the success of the Services and its features and to improve your experience. We reserve the right to make use of any such aggregated data as we see fit. Types of data we may anonymize include, transaction data, click-stream data, performance metrics, and fraud indicators.
Most modern browsers allow you to change your cookie settings. You can usually find these settings in the options or preferences menu of your browser. To understand these settings, the following links for commonly used browsers may be helpful:
Personalized Advertising. We may also use targeted advertising cookies, such as Google Ads, to deliver tailored advertising on our Sites and other websites that you may visit. You can learn more about how to control advertising cookies by visiting the Network Advertising Initiative's Consumer Opt-Out link, the DAA's Consumer Opt-Out link for browsers, or the DAA's opt-out link for mobile devices. Please note that electing to opt-out will not stop advertising from appearing in your browser or applications and may make the ads you see less relevant to your interests.
Do Not Track ("DNT") is a privacy preference that users can set in certain web browsers. DNT is a way for users to inform websites and services that they do not want certain information about their webpage visits collected over time and across websites or online services. We do not recognize or respond to browser-initiated DNT signals, as the Internet industry is currently still working toward defining exactly what DNT means, what it means to comply with DNT, and a common approach to responding to DNT.
Any data that you provide to us may be accessed, shared or processed by our offices, located in the United States, and service providers located in the United States, if such data transfer is necessary for the specific purpose for which you submitted your data (such as the provision of goods or services under a written contract). This may entail a transfer of your personal information across international borders. The data protections standards may differ and be lower than the standards enforced in your jurisdiction.
Our websites and Services are not directed at individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us using the contact details provided in the "Contact Us" section below. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information.
We may retain your personal data for a period of time consistent with the original purpose of collection (see the "Purposes for which we process personal data" section above) or as long as required to fulfill our legal obligations. We determine the appropriate retention period for personal data on the basis of the amount, nature, and sensitivity of the personal data being processed, the potential risk of harm from unauthorized use or disclosure of the personal data, whether we can achieve the purposes of the processing through other means, and on the basis of applicable legal requirements (such as applicable statutes of limitation).
After expiry of the applicable retention periods, your personal data will be deleted. If there is any data that we are unable, for technical reasons, to delete entirely from our systems, we will implement appropriate measures to prevent any further use of or access to such data.
You may have certain rights relating to your personal data, subject to local data protection laws. Depending on the applicable laws these rights may include the right to:
Access your personal data held by us;
Know more about how we process your personal data;
Erase or delete your personal data, to the extent permitted by applicable data protection laws;
Restrict our processing of your personal data, to the extent permitted by law;
Object to our processing of your personal data. Where we process your personal data for direct marketing purposes or share it with third parties for their own direct marketing purposes, you can exercise your right to object at any time to such processing without having to provide any specific reason for such objection;
Opt-out of certain disclosures of your personal data to third parties; and
Not be discriminated against for exercising your rights described above.
We have listed the privacy rights for several U.S. state jurisdictions below, but we understand you may have additional rights in your jurisdiction. You may contact us directly at any time about exercising your data protection rights. We will consider your request in accordance with applicable laws.
Certain state laws require that we detail the categories of personal data that we disclose for certain "business purposes," such as to service providers that assist us with securing our Services or marketing our products.
We disclose the following categories of personal data for our business purposes, as further described in Section 4. Data Sharing and Disclosure:
Sensitive Categories of personal data:
Several jurisdictions grant state residents certain rights, including the right to access specific types of personal data, the right to learn how we process personal data, the right to know whether and how we disclose or sell personal data, the right to opt out of any sale of personal data, the right to request deletion of personal data in certain circumstances, and the right not to be denied goods or services for exercising these rights.
Third Party Marketing. California law further permits you to request information regarding the disclosure of your personal information to third parties for the third parties' direct marketing purposes. We do not disclose your personal information to third parties for the third parties' direct marketing purposes.
Authorized Agents.If you are an authorized agent wishing to exercise rights on behalf of a state resident, please contact us using the information in the "Contact us" section below and provide us with a copy of the consumer's written authorization designating you as their agent. We may need to verify your identity and place of residence before completing your rights request.
Our legal bases for collecting and using your personal data include:
In some countries, and in particular if you are located in the EEA, you may have the right to:
To exercise any of these rights, please contact us as set forth in the "Contact Us" section below and specify which privacy right(s) you wish to exercise. We may need to verify your identity in order to honor your request.
If you have any issues with our compliance, you have the right to lodge a complaint with an EEA supervisory authority. We would, however, appreciate the opportunity to first address your concerns and would welcome you directing an inquiry first to us per the "Contact us" section below.
To exercise your rights, please contact us by using the information in the "Contact Us" section below. Your personal data may be processed in responding to these rights. We will respond to all legitimate requests in a timely manner and in accordance with applicable laws, and will contact you if we need additional information from you in order to honor your request or verify your identity.
We may use your personal data to contact you with newsletters, marketing or promotional materials and other information that may be of interest to you. You may opt out of receiving any, or all of these communications from us by following the unsubscribe instructions provided in any email we send, or you can contact us using the contact details provided in the "Contact Us" section below. You will still continue to receive service-related messages concerning products and Services you have purchased (unless we have indicated otherwise).
We implement a variety of security measures to maintain the safety of your personal information when you enter, submit, or access your personal information.
However, no website, application, or transmission can guarantee security. Thus, while we have established and maintain what we believe to be reasonable procedures to protect the confidentiality, security, and integrity of personal information obtained through the websites, we cannot ensure or warrant the security of any information you transmit to us.