This Privacy Policy explains what we collect through the Mystical Mischief website, how we use it, who we share it with, how long we keep it, and your choices and rights.
Winterwolf Enterprises, LLC, a Nevada limited liability company operating the Mystical Mischief brand and website at mysticalmischief.me (“we,” “us,” “our”), is responsible for the personal information described here. Contact us at [email protected] or through the contact form on the Site.
Information you give us. Your name and preferred on-air name; your email address and, if you provide it, your phone number; membership and account details; the content of any report, story, comment, or other submission; photos or files you upload; and messages you send us.
AI chat and voice data. When you use our AI chat or voice features, we and our technology providers may collect the messages you type or speak (as text), a written record or transcript of the conversation, and any details you choose to provide. Our voice feature streams live in your browser and is NOT recorded — we do not store an audio copy of your voice.
Information collected automatically. Basic technical and usage data such as browser and device type, operating system, referring and exit pages, pages visited and time spent, approximate location derived from your IP address, and interaction data, collected through cookies and similar technologies.
Payment information. If you make a purchase, our third-party payment processor collects and processes your payment details; we do not store full card numbers.
We use information to: operate the chat and voice features and respond to you; create, manage, and secure your account and membership; process payments and send transactional messages; produce, operate, promote, and improve the show, the Site, and related broadcasts; send updates and communications you have signed up for; understand traffic and usage; protect against fraud, abuse, and security threats; and comply with law and enforce our terms. Our use of anything you submit is also governed by our Submission Terms.
We share information with service providers who process it on our behalf — including our website and CRM platform (GoHighLevel / LeadConnector), payment processors (such as Stripe), email, analytics, and hosting providers, and the AI services that power our characters — under their own security and privacy practices. We may also disclose information when required by law or legal process, to protect rights, safety, and security, to enforce our terms, and in connection with a merger, financing, acquisition, reorganization, or sale of assets. We do NOT sell your personal information, and we do NOT “share” it for cross-context behavioral advertising as those terms are defined under California law. We do not use your conversations to train any AI models of our own. We may also use general-purpose AI assistant tools to help us operate the business and draft communications; when we do, we limit the personal information involved to what is necessary.
We and our providers use cookies and similar technologies for essential site functions, security, and your preferences. We do not currently use analytics or advertising cookies. If we add analytics or similar tracking in the future, we will update this Policy and, where required by law, ask for your consent before those cookies are set. You can limit cookies through your browser settings, though some features may not work properly as a result. Some browsers offer a “Do Not Track” signal; because there is no common industry standard, we do not currently respond to it. Where required by law, we honor recognized opt-out preference signals such as the Global Privacy Control (GPC) as a request to opt out of sale/sharing for that browser or device.
We do not store audio recordings of voice conversations. Written records, transcripts, chat messages, and membership and account records are kept for as long as your membership or account is active and for a reasonable period afterward — generally up to 24 months — after which they are deleted or de-identified, unless we are required to keep them longer to comply with the law, resolve a dispute, or enforce our agreements. You may ask us to delete your information sooner at any time (see Section 8).
We use reasonable administrative, technical, and physical measures designed to protect personal information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.
Email and text. Unsubscribe from marketing email using the link in each message; opt out of any text messages by replying STOP. We may still send messages needed to administer your account or respond to you.
Access, correction, and deletion. You may ask us to see, correct, update, or delete the personal information we hold about you, and you may close your membership at any time. To make a request, email [email protected] or use the contact form on the Site. We may need to verify your identity before acting.
If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you the right to: know and access the personal information we collect, use, and disclose; correct inaccurate information; delete your information (subject to exceptions); opt out of any “sale” or “sharing” of personal information (we do not sell or share it); limit the use of sensitive personal information (we do not use it for purposes that trigger this right); and not be discriminated against for exercising your rights. You may make a request yourself or through an authorized agent by contacting us as described above; we will respond as required by law. Because we do not sell or share personal information, you do not need to do anything to opt out, but you may still submit a request.
Other U.S. states. If you live in another U.S. state with a comprehensive privacy law — such as Colorado, Connecticut, Virginia, Texas, Oregon, Montana, and a growing number of others — you may have similar rights to access, correct, delete, and obtain a portable copy of your personal information, and to opt out of targeted advertising, the sale of personal information, and certain profiling. Because we do not sell or share your personal information or use it for targeted advertising, and we honor recognized opt-out signals such as the Global Privacy Control, you can exercise any of these rights by contacting us as described above.
If you are in the European Economic Area or the United Kingdom, you have rights under the GDPR/UK GDPR to: access your personal data; have inaccurate data corrected; have data erased; restrict or object to processing; data portability; and withdraw consent at any time (without affecting prior processing). Our legal bases for processing are: your consent (which you may withdraw); performance of a contract (to provide memberships and features you request); our legitimate interests (to operate, secure, and improve the Site); and compliance with legal obligations. You may lodge a complaint with your local supervisory authority. To exercise your rights, contact us as described above. Note that the Site is operated from the United States, and information will be processed in the United States and other countries whose laws may differ from yours. Where we transfer personal data from the EEA or UK to the United States, we rely on appropriate safeguards, such as the EU-U.S. Data Privacy Framework (including its UK Extension) and/or Standard Contractual Clauses.
The Site and its interactive features are intended for a general adult audience, and we do not knowingly collect personal information from children under 13. We ask for age at sign-up and do not permit those under 13 to register or submit content. If you believe a child under 13 has provided us personal information, please contact us at [email protected] or through the contact form and we will delete it. A parent or legal guardian who believes their child has provided information may contact us to review, delete, or stop further collection of it.
The Site may link to third-party websites and services we do not control. This Policy does not apply to them, and we are not responsible for their content or privacy practices. Review their policies before providing information.
We may update this Policy from time to time. When we do, we will change the “Last updated” date, and if changes are significant we will provide notice by email or a notice on the Site before they take effect. Your continued use of the Site after an update means you accept the revised Policy.
For privacy questions or requests: Winterwolf Enterprises, LLC — Mystical Mischief, [email protected], or use the contact form on the Site.