MYTHOS FOUNDATION PRIVACY POLICY

Mythos Foundation respects the privacy of its online visitors, customers, and gamers (collectively “users”). This Privacy Policy describes how we collect the information on the Mythos Foundation website, and any other websites, apps, features, or other services (“Services”) owned and operated by Mythos Foundation that direct the viewer or user to this Privacy Policy.

1.1. Scope

In this Privacy Policy, the terms "Mythos," "we," and "us" refers to Mythos Foundation and its respective subsidiaries and affiliated companies. The term “Mythical” collectively refers to Mythical, Inc. and its respective subsidiaries and affiliated companies.

This notice describes how Mythos and its affiliates, collect and use personal data. For more information about how Mythical uses your personal data on the Services, please refer to the Mythical Privacy Policy, available at: https://mythicalgames.com/privacy.

Please note that websites, apps, features or other Services that are owned and operated by Mythos may contain links to digital properties that are owned and operated by other companies. This Privacy Policy does not apply to websites and services that are owned and operated by unaffiliated third parties.

1.2. Data Processor and Transfer

Mythos is the data processor or service provider to Mythical for the personal data collected in connection with use of Mythos’ Services. Mythos operates and processes data in the United States. We may also transfer data to countries other than the one where our users live or use our Services.

Mythical is a data controller for the personal data collected in connection with the Services. For more information about how Mythical uses your personal data, please refer to the Mythical Privacy Policy, available at: https://mythicalgames.com/privacy.

2. Data Collection

2.1. The Data We Collect

Like many website operators, we collect information automatically that your device or browser sends whenever you visit our Services.

This includes:

Online Identifiers: Geo location/tracking details, browser fingerprint, operating system, browser name and version, and/or personal IP addresses.
Usage data: We collect data about how users interact with our website and Services. This includes data such as access dates and times, features or pages viewed, type of browser, and third-party sites or services used before interacting with our Services. In some cases, we collect this data through cookies, pixels, tags, and similar tracking technologies that create and maintain unique identifiers.
Device and log data: We may collect data about the devices used to access our Services, including the hardware models, device IP address, operating systems and versions, software, preferred languages, unique device identifiers, advertising identifiers, serial numbers, device motion data, and mobile network data.

2.2. Data Provided by Users

You may give us information by signing up for the Services, entering information through our online forms or surveys, or contacting us for information or customer service.

This includes:

User profile: We collect data when users sign up for the Services or enter information through our online forms or surveys.
Commercial information: We may collect information about Services purchased, obtained, or considered.
Demographic data: We may collect demographic data about users, including through user surveys. In some countries, we may also receive demographic data about users from third parties.
User content: We collect the information users submit when they contact Mythos customer support, provide ratings, or otherwise contact Mythos (e.g., through social media channels).

2.3. Data from Other Sources

This includes:

User feedback.
Users or others providing information in connection with claims or disputes.
Publicly available sources.
Blockchain Data: We may analyze public blockchain data to ensure parties utilizing our Services are not engaged in illegal or prohibited activity under our Terms, and to analyze transaction trends for research and development purposes.
Joint Marketing Partners and Platform Partners: For example, unless prohibited by applicable law, joint marketing partners, service providers, or our platform partners may share information about you with us so that we can better understand which of our Services may be of interest to you.
Marketing service providers.
Information from Mythos subsidiaries and affiliated companies. We may combine the data collected from these sources with other data in its possession.

2.4. Information on Blockchain or Cryptocurrency Platforms

Please note that if you choose to make purchases of cryptocurrency and/or blockchain assets, the cryptocurrency platform, blockchain platform, and/or online wallet will indefinitely retain a publicly available transaction identifier in connection with your purchase. These platforms have their own privacy policies governing the use of user and account data, and we encourage you to refer to the specific platform’s privacy policy in connection with your purchase.

3. How We Use Personal Data

We collect and use data to provide the website and Services. We also use the data we collect:

To enhance the safety and security of our users and Services;
For customer support;
For research and development;
To send marketing and non-marketing communications to users; and,
In connection with legal proceedings.

We do not sell or share user personal data with third parties for their direct marketing, except with users’ consent.

We use the data we collect for purposes including:

3.1. Providing services and features

We use the data we collect to provide, personalize, maintain, and improve our products and Services. This includes using the data to:

Provide the Services;
Facilitate access to third-party blockchain, cryptocurrency and/or wallets; and,
Perform internal operations necessary to provide our Services, including to troubleshoot software bugs and operational problems; to conduct data analysis, testing, and research; and to monitor and analyze usage and activity trends.

3.2. Safety and security

We use personal data to help maintain the safety, security, and integrity of our Services and users.

This includes:

Using device, location, profile, usage, and other data to prevent, detect, and combat fraud or unsafe activities.

3.3. Customer support

We use the information we collect (including recordings of customer support calls with notice to and the consent of the user) to provide customer support, including to:

Direct questions to the appropriate customer support person;
Investigate and address user concerns; and,
Monitor and improve our customer support responses and processes.

3.4. Research and development

We may use the data we collect for testing, research, analysis, product development, and machine learning to improve the user experience. This helps us to improve and enhance the safety and security of our Services, improve our ability to prevent the use of our Services for illegal or improper purposes, develop new features and products, and facilitate insurance and finance solutions in connection with our Services.

3.5. Marketing

We may use the data we collect to market our Services to our users. This includes sending users communications about our games, Services, features, promotions, sweepstakes, studies, surveys, news, updates, and events.

Mythical may also use the data we collect in connection with the Services. For more information about how Mythical uses your personal data, please refer to the Mythical Privacy Policy, available at: https://mythicalgames.com/privacy.

We may also send communications to our users about products and Services offered by our business partners. Although we may send users communications about our partners’ products and Services, we do not sell users’ personal data to, or share it with, such partners or others for purposes of their own direct marketing or advertising, except with users’ consent.

We may use the data we collect to personalize the marketing communications (including advertisements) that we send, including based on user location, past use of our Services, and user preferences and settings.

3.6. Non-Marketing Communications

We may use the data we collect to inform users of changes to our terms, Services, or policies; or send other communications that aren’t for the purpose of marketing the Services or products of Mythos or its partners.

3.7. Legal Proceedings and Requirements

We may use the personal data we collect to investigate or address claims or disputes relating to use of Mythos’ Services, or as otherwise allowed by applicable law, or as requested by regulators, government entities, and official inquiries.

3.8. Automated Decision-Making

We use personal data to make automated decisions relating to use of our Services. This includes:

Deactivating users who are identified as having engaged in fraud or activities that may otherwise harm Mythos, its users and partners, and others.

To object to a decision resulting from these processes, please contact us using the information in the “Contact Us” section below.

4. Data Sharing and Disclosure

Some of Mythos’ products, Services, and features require that we share data with other users or at a user’s request. We may also share data with our affiliates, subsidiaries, and partners, for legal reasons or in connection with claims or disputes.

Mythos may share the data we collect:

4.1. At the User’s Request or for Jointly-Offered Services

This includes sharing data with:

Other people at the user’s request
Service and platform partners
- For example, if a user requests a service through a partnership or promotional offering made by a third party, Mythos may share certain data with those third parties. This may include, for example, other services, wallets, NFT, cryptocurrency, and blockchain platforms, apps, or websites with an API or service with which we integrate.
Mythical
- We may also provide personal information to business partners to whom we offer Services or with whom we offer licensed products and Services. These partners include the companies that provide the NFTs, promotions, contests, or specialized services on our platform, such as Mythical.

4.2. With the General Public

Questions or comments from users submitted through public forums such as our blogs and social media pages may be viewable by the public, including any personal data included in the questions or comments submitted by a user.

4.3. With Mythos Subsidiaries and Affiliates

We share data with our subsidiaries and affiliates to help us provide our Services or conduct data processing on our behalf.

4.4. With our Service Providers and Business Partners

Mythos provides data to vendors, consultants, marketing partners, research firms, and other service providers or business partners who have a legitimate purpose for accessing it.

These include:

Online wallets and cryptocurrency platforms (e.g., MetaMask, Ethereum);
NFT marketplaces that mint and process NFTs;
Cloud storage providers;
Marketing partners and marketing platform providers, including social media advertising services;
Data analytics providers;
Game development partners;
Research partners, including those performing surveys or research projects in partnership with Mythos or on Mythos’ behalf;
Vendors that assist Mythos to enhance the safety and security of our Services;
Consultants, lawyers, accountants, and other professional service providers; and,
Insurance and financing partners.

Some external service providers may also collect information directly from you (for example, an online wallet, cryptocurrency platform, or marketplace may request your government-issued identity document or billing and financial information) in accordance with their own privacy policies. These external service providers do not share your financial information or identity documents with us, but may share limited information with us related to your purchase or account, like a transaction ID.

4.5. For Legal Reasons or in the Event of a Dispute

We may share users’ personal data if we believe it’s required by applicable law, regulation, operating license or agreement, legal process or governmental request, or where the disclosure is otherwise appropriate due to safety or similar concerns.

This includes sharing personal data with law enforcement officials, public health officials, other government authorities, or other third parties as necessary to enforce our user agreements or other policies; to protect our rights or property or the rights, safety, or property of others; or in the event of a claim or dispute relating to the use of our Services.

This also includes sharing personal data with others in connection with, or during negotiations of, any merger, sale of company assets, consolidation or restructuring, financing, or acquisition of all or a portion of our business by or into another company.

4.6. With Consent

We may share a user’s personal data other than as described in this notice if we notify the user and they consent to the sharing.

5. Anonymized And Aggregated Data

We may also aggregate or otherwise strip information of all personally identifying characteristics and may share that aggregated, anonymized data with third parties or publish it. This data does not personally identify you and helps us to measure the success of the Services and its features and to improve your experience. We reserve the right to make use of any such aggregated data as we see fit. Types of data we may anonymize include, transaction data, click-stream data, performance metrics, and fraud indicators.

6. Cookies And Third-Party Technologies

Mythos and its partners use cookies and other identification technologies on our games, apps, websites, emails, and online ads for purposes described in this notice. Cookies are small text files that are stored on browsers or devices by websites, apps, online media, and advertisements. Mythos uses cookies and similar technologies for purposes such as:

Authenticating users;
Remembering user preferences and settings;
Determining the popularity of content;
Delivering and measuring the effectiveness of advertising campaigns; and,
Analyzing site traffic and trends, and generally understanding the online behaviors and interests of people who interact with our Services.

We may also allow others to provide audience measurement and analytics services for us, to serve advertisements on our behalf across the Internet, and to track and report on the performance of those advertisements. These entities may use cookies, web beacons, SDKs, and other technologies to identify the devices used by visitors to our websites, as well as when they visit other online websites and services.

Google Analytics. We may use Google Analytics. We use the information we get from Google Analytics only to improve our websites. We do not combine the information collected through the use of Google Analytics with personally identifiable information. Please refer to Google’s Privacy Policy for more information. You may also choose to download the Google Analytics opt-out browser add-on.

You may wish to restrict the use of cookies. Please be aware that some of the features of our Site may not function correctly if you disable cookies.

Most modern browsers allow you to change your cookie settings. You can usually find these settings in the options or preferences menu of your browser. To understand these settings, the following links for commonly used browsers may be helpful:

Cookie settings in Chrome

Cookie settings in Firefox

Cookie settings in Internet Explorer

Cookie settings in Safari web and iOS

Personalized Advertising. We may also use targeted advertising cookies, such as Google, Reddit, and Twitter Ads and Facebook and TikTok Pixel, to deliver tailored advertising on our websites and other websites that you may visit. You can learn more about how to control advertising cookies by visiting the Network Advertising Initiative’s Consumer Opt-Out link, the DAA’s Consumer Opt-Out link for browsers, or the DAA’s opt-out link for mobile devices. Please note that electing to opt-out will not stop advertising from appearing in your browser or applications and may make the ads you see less relevant to your interests.

Do-Not-Track-Signals
Do Not Track (“DNT”) is a privacy preference that users can set in certain web browsers. DNT is a way for users to inform websites and services that they do not want certain information about their webpage visits collected over time and across websites or online services. We do not recognize or respond to browser-initiated DNT signals, as the Internet industry is currently still working toward defining exactly what DNT means, what it means to comply with DNT, and a common approach to responding to DNT.

7. International Transfer of Personal Data

Any data that you provide to us may be accessed, shared or processed by our offices, located in the United States, and service providers located in the United States, if such data transfer is necessary for the specific purpose for which you submitted your data (such as the provision of goods or services under a written contract). This may entail a transfer of your personal information across international borders. The data protections standards may differ and be lower than the standards enforced in your jurisdiction.

8. Children

Our websites are not directed at individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us using the contact details provided in the “Contact Us” section below. If we become aware that a child under 16 has provided us with personal information, we will take steps to delete such information.

9. Data Retention

We may retain your personal data for a period of time consistent with the original purpose of collection (see the “Purposes for which we process personal data” section above) or as long as required to fulfill our legal obligations. We determine the appropriate retention period for personal data on the basis of the amount, nature, and sensitivity of the personal data being processed, the potential risk of harm from unauthorized use or disclosure of the personal data, whether we can achieve the purposes of the processing through other means, and on the basis of applicable legal requirements (such as applicable statutes of limitation).

After expiry of the applicable retention periods, your personal data will be deleted. If there is any data that we are unable, for technical reasons, to delete entirely from our systems, we will implement appropriate measures to prevent any further use of or access to such data.

Information on Blockchain or Cryptocurrency Platforms. Please note that if you choose to make purchases of cryptocurrency and/or blockchain assets, the cryptocurrency platform, blockchain platform, and/or online wallet will indefinitely retain a publicly available transaction identifier in connection with your purchase. These platforms have their own privacy policies governing the retention of personal data, and we encourage you to refer to the specific platform’s privacy policy in connection with your purchase.

10. Your Rights Relating to Your Personal Data

10.1. Your Rights

You may have certain rights relating to your personal data, subject to local data protection laws. Depending on the applicable laws these rights may include the right to:

Access your personal data held by us;
Know more about how we process your personal data;
Erase or delete your personal data, to the extent permitted by applicable data protection laws;
Restrict our processing of your personal data, to the extent permitted by law;
Object to our processing of your personal data.Where we process your personal data for direct marketing purposes or share it with third parties for their own direct marketing purposes, you can exercise your right to object at any time to such processing without having to provide any specific reason for such objection;
Opt - out of certain disclosures of your personal data to third parties; and
Not be discriminated against for exercising your rights described above.

10.2.Additional Disclosures for California, Colorado or Virginia Residents

We have listed the privacy rights for several U.S.state jurisdictions below, but we understand you may have additional rights in your jurisdiction.You may contact us directly at any time about exercising your data protection rights.We will consider your request in accordance with applicable laws.

Certain state laws require that we detail the categories of personal data that we disclose for certain “business purposes,” such as to service providers and platform partners that assist us with providing and securing our Services or marketing our products.

We disclose the following categories of personal data for our business purposes, as further described in Section 4. Data Sharing and Disclosure:

Identifiers;
Personal information under California Civil Code section 1798.80;
Commercial information;
Internet activity and electronic information;
Inferences drawn from any of the above information categories.

Several jurisdictions grant state residents certain rights, including the right to access specific types of personal data, the right to learn how we process personal data, the right to know whether and how we disclose or sell personal data, the right to opt out of any sale of personal data, the right to request deletion of personal data in certain circumstances, and the right not to be denied goods or services for exercising these rights.

Third Party Marketing. California law further permits you to request information regarding the disclosure of your personal information to third parties for the third parties’ direct marketing purposes.We do not disclose your personal information to third parties for the third parties’ direct marketing purposes.

Do Not Sell My Personal Information. In the preceding twelve months we have not sold personal information for monetary consideration, but we recognize that some state privacy laws define “personal information” in such a way that some sharing of personal information necessary to provide you with personalized ads may be considered a “sale,” even if no money is exchanged.

Authorized Agents. If you are an authorized agent wishing to exercise rights on behalf of a state resident, please contact us using the information in the “Contact us” section below and provide us with a copy of the consumer’s written authorization designating you as their agent.We may need to verify your identity and place of residence before completing your rights request.

10.3.Additional Disclosures for Data Subjects in the EEA and the U.K.

Residents in the European Economic Area and the United Kingdom(together, for purposes of this section of the Privacy Policy, “EEA”), as well as certain other jurisdictions, are entitled to certain rights and disclosures with respect to their personal data.

Our legal bases for collecting and using your personal data include:

The performance of your contract or to enter into the contract and to take action on your requests.For example, the processing of your account registration, providing our Services and products to you, providing customer service to you.
Our legitimate business interests.For example, fraud prevention, maintaining the security of our network and Services, direct marketing to you, and maintaining, analyzing, and improving our products and Services.
Compliance with a mandatory legal obligation.For example, maintaining administrative records which are subject to mandatory retention periods.We may also collect your personal data to record your requests to exercise your rights and to verify your identity for such requests.
Consent you provide where we do not rely on another legal basis.Consent may be withdrawn at any time.

In some countries, and in particular if you are located in the EEA, you may have the right to:

Access your personal data;
Correct inaccurate personal data;
Request erasure of your personal data without undue delay;
Request the restricted processing of your personal data;
Request portability of the personal data that you have given us; and
To object to the processing of your personal data.

To exercise any of these rights, please contact us as set forth in the “Contact Us” section below and specify which privacy right(s) you wish to exercise.We may need to verify your identity in order to honor your request.

If you have any issues with our compliance, you have the right to lodge a complaint with an EEA supervisory authority. We would, however, appreciate the opportunity to first address your concerns and would welcome you directing an inquiry first to us per the “Contact us” section below.

10.4.How to Exercise Your Rights

To exercise your rights, please contact us by using the information in the “Contact Us” section below.Your personal data may be processed in responding to these rights.We will respond to all legitimate requests in a timely manner and in accordance with applicable laws and will contact you if we need additional information from you in order to honor your request or verify your identity.

10.5.Your Preferences for Marketing Communications

We may use your personal data to contact you with newsletters, marketing or promotional materials and other information that may be of interest to you.You may opt out of receiving any, or all of these communications from us by following the unsubscribe instructions provided in any email we send, or you can contact us using the contact details provided in the “Contact Us” section below.You will still continue to receive service - related messages concerning products and Services you have purchased(unless we have indicated otherwise).

11. How We Secure Your Personal Data

We implement a variety of security measures to maintain the safety of your personal information when you enter, submit, or access your personal information.

However, no website, application, or transmission can guarantee security.Thus, while we have established and maintain what we believe to be reasonable procedures to protect the confidentiality, security, and integrity of personal information obtained through the websites, we cannot ensure or warrant the security of any information you transmit to us.

12. Changes to This Privacy Policy

We may change our Privacy Policy at any time.If we make material changes to this privacy policy, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification.We encourage you to periodically review this Privacy Policy to ensure you are familiar with the most current version.

13. Contact Us

If you wish to contact us or have any questions about or complaints in relation to this Privacy Policy, please contact us at the following contact details: [email protected] or [email protected].