Privacy Policy

Effective Date: 10/17/2025
Website: https://glyphandgrimoire.com

1. Who We Are

Glyph & Grimoire is an independent storytelling and creative brand. It is operated by Chris Mitchell. The focus is on tabletop role-playing games, gothic horror, and narrative design.

Website: https://glyphandgrimoire.com
Email: chris@glyphandgrimoire.com
Location: United States

2. What Personal Data We Collect and Why

We collect personal and non-personal data to improve your experience, deliver content, and maintain website functionality.

💬 Comments

When visitors leave comments, we collect:

  • The data shown in the comments form (name, email, message)
  • The visitor’s IP address and browser user agent string (to help spam detection)
  • A hashed version of your email may be provided to Gravatar to display your profile image. Gravatar Privacy Policy

🖼 Media

If you upload images to the site, avoid uploading files with embedded location data (EXIF GPS). Visitors can download and extract any location data from images on the site.

📬 Contact Forms

If you contact us via a form, we collect your name, email address, and message content for customer service purposes.
We retain these messages for up to 6 months but do not use the information for marketing unless you explicitly opt-in.

🍪 Cookies

Cookies enhance user experience and site analytics. Examples include:

  • Comment cookies: Save your name/email for convenience next time you comment.
  • Analytics cookies: Track page performance and visitor interactions.
    You can clear or disable cookies anytime through your browser settings.

📊 Analytics

We use Google Analytics and WordPress.com Stats to measure traffic and engagement.

3. Who We Share Your Data With

We only share limited information with trusted service providers who help us operate this site, such as:

  • WordPress.com / Automattic – hosting and analytics
  • Mailchimp – newsletter management (email + opt-in consent required)
  • Affiliate networks (Amazon, DriveThruRPG, etc.) – for link tracking and commission reporting
    Each third party complies with applicable data protection laws. Links to their policies are provided when relevant.

4. How Long We Retain Your Data

  • Comments: Indefinitely, unless deleted by the user or site admin.
  • Contact form entries: 6 months.
  • Analytics data: Up to 26 months.
  • Subscriber information: Until you unsubscribe or request deletion.

5. What Rights You Have Over Your Data

You may request to:

  • Access, correct, or delete your personal data.
  • Withdraw consent for marketing.
  • Request a copy of data we hold about you.
    To exercise these rights, contact chris@glyphandgrimoire.com.

6. Where Your Data Is Sent

Data may be processed through servers in the United States or other countries where our service providers (e.g., WordPress.com, Mailchimp, Google) operate.
We ensure all transfers comply with international privacy standards such as the EU–U.S. Data Privacy Framework.

7. How We Protect Your Data

We employ encryption (HTTPS), two-factor authentication, and regular security reviews provided by WordPress.com.
Our hosting provider automatically implements server-side protection, firewalls, and malware scanning.

8. Data Breach Procedures

If a breach occurs, we will:

  1. Identify and isolate the source.
  2. Notify affected users within 72 hours (if required by law).
  3. Work with our providers to secure or restore affected systems.

9. Third-Party Data and Automated Decision-Making

We do not use automated decision-making, credit profiling, or advertising algorithms to make personal decisions about users.
We may receive aggregated analytics data from advertising platforms to measure campaign performance — never personal identifiers.

10. Affiliate Disclosure

Some pages include affiliate links. Clicking these links may allow third parties to track your referral source and purchase details.
We only partner with reputable networks such as:

  • Amazon Associates
  • DriveThruRPG
  • DMsGuild
  • Roll20
    Affiliate commissions help sustain Glyph & Grimoire at no extra cost to you.

11. Children’s Privacy

This website is intended for audiences aged 16 and older.
We do not knowingly collect information from minors.

12. Contact Information

For privacy concerns or data requests:

Chris Mitchell
📩 chris@glyphandgrimoire.com
🌐 https://glyphandgrimoire.com