Privacy Policy

Information we collect

Information you give us

Depending on the feature you use, this may include your name or Collector name, email address, marketing preferences, TikTok username supplied for prize contact, account details, messages you send us, Dragon Selection answers, optional profile information, Founding 36 information, and images or appearance details you voluntarily submit for campaign features or prize fulfilment.

Campaign and account records

We keep records needed to operate The Amaranthe Deck, including server-verified Dragon Selection results, calculated trait scores and Dragon matches, collected cards, Selection Trial history, milestones, Gift assignments, Founding 36 status, account-verification status and other records needed to administer the campaign and verify prize eligibility.

Technical information

When you use the site, our systems and security providers may receive technical information such as IP address, browser and device information, approximate region inferred from network information, referring page, timestamps, requested URLs, server logs, cookies, local-storage values, security signals, CAPTCHA results and diagnostic information.

Dragon Selection & The Amaranthe Deck

Your email address may be used as the campaign key that allows server-verified public Dragon Selection results to accumulate under the same collection, including results submitted before you activate or log in to a Collector account. Use of the same email address allows legitimate results and newly collected Dragon Cards to remain associated with one collector identity.

Your questionnaire answers are used to calculate trait values, compatibility and a Dragon result. Collection records are used to operate Selection Trials, card progression, Gifts, milestones, Founding 36 qualification and campaign or prize verification.

The Dragon Selection uses automated rules to produce an entertainment and campaign result. It is not used to make legal, employment, credit, insurance, housing or similarly significant decisions about you.

Collector accounts, login & prize contact

If you activate a Collector account, we process the information needed to authenticate you, protect the account and show your collection. WordPress handles passwords using password hashing; we do not need your readable password to administer the account.

Optional campaign profile information may include a TikTok username, Founding 36 display preferences, age information where requested for campaign administration, and an image or appearance details you choose to provide. A TikTok username is an additional way for Annis to identify or contact a potential prize winner; it does not replace account or server-record verification.

Most account and campaign information is private. Information is displayed publicly only when a campaign feature expressly provides for public display and the applicable visibility choice permits it.

Email marketing

Joining a reader list or agreeing to campaign marketing is voluntary. We may process your email address, signup source, consent status and related delivery information so we can send the emails you requested.

Campaign marketing consent entered during Dragon Selection is not sent to our email-marketing provider until control of the related Collector email has been verified through account activation/password setup or authenticated login. After verification, relevant information may be sent to Sender.net for email delivery and list management.

Marketing emails may contain standard delivery, open or link-measurement features supplied by the email platform. You can unsubscribe at any time using the unsubscribe link in a marketing email. Unsubscribing from marketing does not delete a Collector account or campaign records that we still have another lawful reason to keep.

Advertising, pixels & measurement

We may advertise The Amaranthe Cycle and related books or campaigns on third-party platforms. We advertise on TikTok. Depending on campaign configuration, advertising platforms may provide pixels, event APIs, conversion measurement, audience or attribution tools that can process information such as cookie or device identifiers, IP address, browser/device information, page visits, referral or campaign parameters and actions taken on the site.

We may later use advertising or measurement services from Google (for example Google Ads or analytics products) and Meta (for example Meta Pixel or related advertising tools). If these services are enabled, this policy applies to the related processing from the date they are enabled.

Advertising providers may use information they receive under their own privacy terms, including for measurement, fraud prevention, attribution, audience building or personalized advertising where permitted. We do not sell personal information for money. In some jurisdictions, disclosure of identifiers or activity data for cross-context or targeted advertising may nevertheless be legally described as a “sale”, “sharing” or targeted advertising.

Where applicable law requires consent before non-essential advertising or analytics technologies are used, we intend to use those technologies subject to the required choice or consent. Your browser and device settings may also let you limit cookies or advertising identifiers.

Cookies, browser storage & security

The site uses cookies and browser storage for functions such as WordPress login, Collector authentication, campaign/session continuity, trusted-browser features, quiz recovery or retry behaviour, interface preferences and security. Some of these are necessary for a feature you request to work.

We use security and anti-abuse measures that may include Wordfence, Google reCAPTCHA, server-side validation and rate limits. These services may process technical, device and network information to detect automated requests, brute-force attempts, manipulated submissions, malicious traffic or other activity that could affect the website or campaign.

If advertising or analytics technologies are enabled, they may use additional cookies, pixels, local storage or similar technologies. Those technologies are separate from the cookies needed for login, security and core campaign functionality.

Why we use information

We use personal information to provide the website and campaign features you request; create and secure Collector accounts; associate campaign results with collections; administer cards, Gifts, milestones and prizes; deliver requested emails; answer messages; operate and measure advertising; maintain site security; prevent fraud and abuse; diagnose technical problems; maintain appropriate records; and comply with legal obligations.

Depending on the activity and the law that applies, our legal basis may be your consent, steps taken at your request, performance of a service or campaign relationship, our legitimate interests in operating and protecting the site and promoting our books, or compliance with a legal obligation. Where processing relies on consent, you may withdraw that consent for future processing.

Who we share information with

We use service providers and platforms where reasonably necessary to operate, secure and promote the site. Depending on the feature and current configuration, these may include:

• website hosting, infrastructure, backups and email-delivery providers;
• Sender.net for consented email marketing and list management;
• Wordfence and Google reCAPTCHA for security and anti-abuse protection;
• TikTok for advertising, attribution or campaign measurement where those tools are enabled;
• Google or Meta for advertising or measurement if we enable those services;
• professional advisers, technical contractors or authorities where reasonably necessary or legally required.

We do not give advertisers access to your Collector password. We also do not disclose your private Dragon Selection answers merely because you viewed an advertisement.

International data transfers

Our visitors, service providers and technology platforms may be located in different countries. As a result, information may be processed outside the country where you live, including in countries whose data-protection rules differ from yours.

Where applicable data-protection law requires safeguards for an international transfer, we rely on the safeguards or transfer mechanisms made available under the relevant provider arrangements and applicable law.

How long we keep information

We keep information only for as long as reasonably needed for the purpose for which it is processed, subject to legal, security and campaign-administration needs.

• Collector and campaign records: may be kept while The Amaranthe Deck is active and afterwards where needed to preserve collection history, verify winners, resolve disputes, prevent abuse or maintain an accurate campaign record.
• Marketing records: are generally kept until you unsubscribe, the relevant list is retired, or the data is otherwise deleted under our or the email provider's retention settings. We may retain a suppression record so we know not to re-add an unsubscribed address.
• Security and technical logs: are kept for periods appropriate to troubleshooting, security, abuse prevention and legal requirements.
• Advertising data: retention may also depend on the settings and policies of the advertising platform used for the relevant campaign.

Your privacy rights

Your rights depend on where you live and which law applies. They may include the right to request access to personal information, correction, deletion, restriction, objection, portability, or withdrawal of consent.

EEA, United Kingdom and similar jurisdictions

Where the GDPR, UK GDPR or a similar law applies, you may also have the right to object to certain processing based on legitimate interests and to complain to the data-protection supervisory authority responsible for your location.

United States privacy rights

Residents of certain U.S. states may, where the applicable law and business thresholds apply, have rights to access, correct or delete personal information, obtain a portable copy, and opt out of certain targeted advertising or legally defined “sale” or “sharing” of personal information. Exercising a privacy right will not result in unlawful discrimination.

Some information may need to be retained after a deletion request where another lawful reason requires it, such as prize administration, fraud prevention, dispute records, security or a legal obligation.

To make a privacy request, contact hello@annissharp.com. We may need to verify that the request relates to you before acting on it.

Children's privacy

The site and The Amaranthe Cycle are intended for an adult readership and are not designed as services for children. We do not knowingly seek to collect personal information from children in circumstances where parental authorization is required by applicable law. If you believe a child has provided personal information improperly, contact us so we can review the situation.

External sites & social platforms

The site may link to Amazon, TikTok, Instagram, Facebook, YouTube, Pinterest, Reddit, X, Goodreads and other external services. When you follow an external link, the destination service controls its own processing and privacy practices. Their policies apply to information processed on their services.

Changes & contact

We may update this Privacy Policy when the website, campaign, advertising setup, security tools, service providers or legal requirements change. The “Last updated” date on this page will be changed when a revised policy is published.

For privacy questions, requests or concerns, contact hello@annissharp.com.