Privacy policy

Welcome to Legends of Avantris! This Privacy Policy (β€œPolicy”) describes how Legends of Avantris LLC (β€œAvantris,” β€œwe,” β€œus,” or β€œour”) collects, uses, shares, and safeguards personal information when you interact with our website, place an order, subscribe to updates, or engage with our Services.

Please visit SMS/Mobile Messaging Terms of Service for SMS policy.Β 

1. WHO WE ARE

Avantris is a creator-owned entertainment brand based in Maryland. We produce original livestreamed tabletop roleplaying campaigns, community content, and fantasy-inspired merchandise. Our webstore is powered by Shopify, and we also engage with our audience through platforms like Twitch, Patreon, YouTube, Discord, and licensed marketplaces.

Avantris acts as the data controller for personal information collected through our website and branded services. This means we determine the purpose and method of how your data is processed. In some cases, we may rely on third-party service providers (such as payment processors, shipping couriers, or streaming platforms), who may also process your information under their own terms and responsibilities.

We are committed to protecting your privacy and handling personal data lawfully, fairly, and transparently in accordance with applicable laws, including the General Data Protection Regulation (β€œGDPR”), California Consumer Privacy Act (β€œCCPA”), and other international frameworks where relevant.

2. SCOPE

This Policy applies to personal information collected when you visit our websites (including avantris.com and thecrookedmoon.com), create an account, make a purchase, subscribe to email updates, or otherwise engage with Avantris content. It also covers information shared through livestream interactions, audience submissions, giveaways, forms, customer support, and other features connected to our digital presence. Some of our Services may integrate with third-party platforms such as Twitch, Patreon, YouTube, Discord, or licensed marketplaces; however, this Policy does not extend to those external services, even when accessed through our site. We encourage you to review their privacy policies independently, as their data practices are governed by separate terms.

3. WHAT WE COLLECT

We collect personal information to provide our Services, operate our online store, fulfill purchases, improve your experience, and understand how our audience engages with Avantris across our platforms. The types of data we collect depend on how you interact with us (whether as a customer, a viewer, a community member, or all three).

A. Information You Provide Directly

You share personal information when you create an account, make a purchase, subscribe to our email list, submit a form, or contact us directly. This may include your name, email address, shipping and billing addresses, phone number (if provided), and any preferences, messages, or custom order details you choose to provide.

If you participate in giveaways, community events, surveys, or live promotions, we may collect additional information necessary to administer the activity (such as your responses, eligibility, and contact details for delivery or communication).

Payment details are submitted directly to our third-party payment providers. We never store your full card number or CVV, and we rely on secure tokenization and processor compliance to protect that data.

B. Information from Third-Party Platforms

When you interact with Avantris through streaming platforms, social media, or community services, those platforms may share limited information with us (depending on your privacy settings and their own terms). This may include your display name, profile image, purchase history, activity data, or comments submitted through livestream chat, forums, or integrations.

For example, if you support us on a subscription platform, contribute through livestream tipping, or redeem rewards, we may receive your public username, support tier, and related interaction history to personalize your experience or fulfill digital goods.

We also use third-party services to measure performance, manage ads, and analyze traffic. These services may provide us with anonymized or aggregate data about your visit (such as where you came from, which pages you viewed, or how long you stayed).

C. Information We Collect Automatically

When you access our website, we automatically collect certain technical data to improve our Services and keep them secure. This includes your IP address, browser type and version, time zone, device identifiers, operating system, referring URLs, and general site behavior (such as clicks, scrolls, and time spent on each page).

We use cookies and similar tracking technologies (like pixels and tags) to enable site functionality, remember your preferences, analyze performance, and deliver relevant promotions. Some of these cookies are placed by third-party services that support our store infrastructure, analytics, or marketing efforts. For more information, please refer to our Cookie Policy below.

Please do not submit sensitive information through public chats, online servers (including Discord), livestreams, or forms.

D. Sensitive Personal Information

We do not knowingly collect sensitive personal information, including data relating to race, religion, health, sexual orientation, biometric identifiers, or political affiliation. If you believe such information has been submitted inadvertently, please contact us so we can remove it.

E. Children’s Data

Our Services are not intended for children under the age of 13 (or other minimum legal age in your jurisdiction). We do not knowingly collect personal information from children. If we learn that a child has provided us with personal data, we will take steps to delete it as required by applicable law.

4. HOW WE USE YOUR INFORMATION

We use personal information to operate our Services, fulfill purchases, communicate with users, and improve the way people experience Avantris across our website, livestreams, and affiliated platforms. This includes supporting your interactions as both a customer and a community member.

We use your information to:

  • Process and fulfill orders, including shipping, returns, and related support

  • Manage your account and purchase history

  • Communicate about transactions, updates, promotional offers, or service changes

  • Personalize your experience across our store, livestream content, and communications

  • Analyze audience behavior to improve our Services and develop new offerings

  • Detect, prevent, or respond to fraud, abuse, or security risks

  • Comply with applicable legal obligations and enforce our Terms of Service

We do not use your personal information to train AI models, engage in automated decision-making that produces legal or similarly significant effects, or create behavioral profiles beyond the scope of analytics and security functions. We will not use your personal information to create behavioral profiles for marketing beyond what is necessary to provide our Services.

Β 

A. Legal Basis

If you reside in a jurisdiction that requires a legal basis for processing, such as the European Union, the United Kingdom, or certain U.S. states, we process your data in accordance with the following legal grounds:

  • Consent, where you have actively agreed to data use (such as for marketing communications or optional cookies)

  • Contractual necessity, to fulfill orders or provide Services you have requested

  • Legal obligation, when we are required to retain or process certain data for compliance purposes

  • Legitimate interests, such as improving our Services, understanding usage patterns, and maintaining security, unless those interests are overridden by your data rights

  • Vital interests, in limited circumstances involving safety, fraud, or legal claims

We do not sell your personal information or share it with third parties for their independent marketing purposes. Additional detail is provided in the following Section.

5. HOW WE SHARE YOUR INFORMATION

We share personal information only as necessary to operate our Services, support business functions, comply with legal obligations, and protect our users and brand. We do not sell your personal information or share it with third parties for their independent marketing purposes. We will not share your opt-in to an SMS campaign with any third party for purposes unrelated to providing you with the services of that campaign.Β 

We may share your information with:

  • Service Providers. We work with third-party providers who help us operate our website, process payments, manage email communications, ship orders, provide customer support, analyze traffic, and maintain platform security. These include hosting providers, payment processors, shipping couriers, analytics services, and marketing vendors. These entities are contractually required to handle your data only as directed by us and in accordance with applicable privacy laws.

  • We may share your Personal Data, including your SMS opt-in or consent status, with third parties that help us provide our messaging services, including but not limited to platform providers, phone companies, and any other vendors who assist us in the delivery of text messages.

  • Platform Integrations. When you engage with Avantris through platforms such as Shopify, Twitch, Patreon, or Discord, your data may be processed according to the terms and privacy policies of those services. We do not control how those platforms handle your data once shared, and we encourage you to review their privacy practices directly.

  • Professional Advisors. We may share information with legal, accounting, or business advisors when necessary for compliance, dispute resolution, or operational support.

  • Legal and Compliance. We may disclose personal data when required by law, in response to legal process, or as part of investigations intended to protect our rights, users, or the public.

  • Business Changes. If Avantris undergoes a reorganization, merger, acquisition, or sale of assets, your information may be transferred as part of the transaction, subject to applicable privacy protections.

  • With Your Consent. In limited cases, and only with your explicit consent, we may share your data with third parties not otherwise covered by this Policy.

A. Public Interactions

If you participate in public spaces connected to Avantris, including livestream chats, Discord communities, or comment features, certain information may become visible to others. This may include your username, messages, profile content, or any media you voluntarily post. We do not monitor or control what you choose to share in public-facing environments and encourage you not to submit sensitive or personal information in these settings, as we cannot guarantee its removal by third parties.

B. International Data Transfers

Your personal information may be transferred to, processed in, or stored in jurisdictions outside of your place of residence, including the United States and Canada. These transfers occur primarily because of the geographic locations of our service providers. When required by law, we implement recognized safeguards such as Standard Contractual Clauses or equivalent mechanisms to maintain data protection standards during these transfers.

For more information on Shopify’s international data handling, see: https://www.shopify.com/legal/privacy.

6. HOW WE STORE, RETAIN & PROTECT YOUR DATA

We store and process your personal information using technical, physical, and administrative safeguards designed to protect your privacy and comply with global data protection standards. Your data is primarily processed and stored through trusted service providers such as Shopify, our payment processors, and marketing platforms. These providers are contractually required to follow strong security practices and handle your data only as directed by us.

We retain your personal information only as long as needed to fulfill the purposes described in this Policy. This includes:

  • completing transactions,

  • maintaining account records,

  • supporting our Services,

  • complying with legal obligations,

  • resolving disputes, or

  • enforcing our agreements.

Payment details are processed securely by our providers and are never stored on our servers. In general:

  • Order and account information may be retained for up to seven years, or longer where required by law

  • Customer support communications are retained as needed to resolve your inquiry or meet regulatory requirements

  • Email and marketing preferences are retained until you unsubscribe or request deletion

  • Aggregated or anonymized data, which cannot be linked back to you, may be retained indefinitely for research or analytics

If you request deletion of your personal information, we will honor the request in accordance with applicable laws, subject to limited retention obligations such as legal claims or tax compliance.

We implement a variety of safeguards to protect personal information, including encryption, access controls, secure servers, and periodic review of vendor practices. Our service providers are expected to maintain comparable standards, and we conduct risk assessments where appropriate. While no system can be fully immune to risks, we are committed to promptly responding to incidents and, where legally required, notifying you in the event of a significant data breach.

A. Breach Notification

If we become aware of a security incident involving your personal information that presents a material risk, we will notify you as required under applicable law. This may include direct communication (such as email) or public notice, depending on the nature and scope of the breach. We will also take appropriate steps to mitigate the impact and prevent future occurrences.

You are responsible for keeping your login credentials confidential. If you believe your account has been accessed without authorization, contact us immediately.

7. YOUR RIGHTS

Depending on where you live and the data protection laws that apply to you, you may have certain rights regarding your personal information. These rights allow you to access, control, and in some cases limit how we use your data.

You may have the right to:

  • Access the personal information we hold about you, and request a copy

  • Request that we correct or update inaccurate or incomplete data

  • Ask us to delete your personal information when it is no longer needed, or when consent has been withdrawn (where applicable)

  • Request that we restrict how we use your data in certain circumstances

  • Object to processing where we rely on our legitimate interests, subject to applicable conditions

  • Request a copy of your personal data in a portable format, or ask that it be transferred to another provider

  • Withdraw consent at any time where processing is based on consent

  • Opt out of targeted advertising or the sale or sharing of your personal data (where applicable under law)

  • Appoint an authorized agent to act on your behalf, if you are a resident of California or another jurisdiction that permits this

  • File a complaint with a relevant data protection authority if you believe your rights have been violated

To exercise any of these rights, please contact us at legal@avantris.com. We may need to verify your identity before completing your request. We will respond within the timeframes required by law, typically within thirty (30) days.

We may decline certain requests where permitted by law, such as when the request would conflict with legal obligations, compromise the rights of others, or affect pending claims or regulatory inquiries.

A. Automated Decision-Making

We do not use personal data to engage in fully automated decision-making that has legal or similarly significant effects. Shopify, our ecommerce platform provider, may use limited automated processes to detect fraud or abuse, including temporary blacklisting of IP addresses or credit card tokens associated with failed transactions. These safeguards do not materially impact your rights or access.

8. YOUR CONTROLS

We believe your data should serve your experience, not the other way around. You have choices in how your personal information is used, shared, and retained. We provide several ways to exercise that control, depending on how you interact with Avantris.

  • Email Preferences. You can unsubscribe from promotional or marketing emails at any time using the link included in each message. Transactional emails related to orders, account updates, or service notices will still be sent when necessary.

  • Cookie and Tracking Settings. You can manage your preferences through the cookie banner available on our website or adjust browser settings to block or delete cookies at any time. Some functionality may be limited if cookies are disabled.

  • Third-Party Platforms. If you access or interact with Avantris through external platforms (such as Twitch, Patreon, or Discord) your information may be subject to those platforms’ privacy settings and data policies. We encourage you to review and manage your preferences directly through your account on each respective service.

  • Account and Personal Data. If you create an account on our site, you can update certain personal details within your account dashboard. You may also request access to, correction of, or deletion of your information at any time by contacting us at legal@avantris.com.

We may ask for verification before processing requests, and we will respond within the timeframe required by law. Please be aware that some data may be retained where legally necessary, such as to comply with tax, fraud prevention, or contractual obligations.

9. COOKIE POLICY

A. What Are Cookies?

Cookies are small text files placed on your device when you visit our websites or use our Services. They serve a variety of functions, including enabling platform functionality, remembering user preferences, enhancing security, and analyzing usage patterns.

B. Types of Cookies We Use

We use several categories of cookies and similar tracking technologies:

  • Strictly Necessary Cookies. Essential for the operation of our website (such as managing shopping carts, processing orders, and enabling security features).

  • Performance & Analytics Cookies. Help us understand how users interact with our website by collecting aggregated information on traffic and performance (for example, through Shopify and Google Analytics).

  • Functional Cookies. Enable enhanced functionality and personalization, such as remembering your preferences and settings.

  • Advertising & Social Media Cookies. Used by our marketing and social media partners (including Meta, Google, and TikTok) to deliver relevant content, measure campaign performance, and understand audience behavior across platforms. The website uses cookies to help keep track of items you put into your shopping cart including when you have abandoned your cart and this information is used to determine when to send cart reminder messages via SMS.

For a current list of cookies used by our storefront, please refer to Shopify’s cookie documentation: https://www.shopify.com/legal/cookies.

C. Managing Cookies

When you first visit our website, you may be presented with a cookie banner that allows you to accept, reject, or customize non-essential cookies. You can manage your preferences at any time by adjusting your browser settings or using the controls provided on our website.

Most browsers let you refuse, accept, or delete cookies through their β€œTools” or β€œPreferences” menus. Blocking cookies may affect website performance and limit certain features. For more information about managing cookies, visit www.allaboutcookies.org

You may also opt out of targeted advertising from participating partners by visiting:

D. First-Party vs. Third-Party Cookies

First-party cookies are placed directly by Avantris and used only in connection with our website and Services (for example, remembering your cart or login session).

Third-party cookies are set by external providers whose services are integrated with our site (such as analytics, advertising, social media plug-ins, or embedded content). Some pages or features may link to or embed third-party content, including partner campaigns, livestream platforms, or community tools. These third parties may place their own cookies or tracking technologies, which are not governed by this policy. While we control the use of first-party cookies, third-party cookies are governed by the privacy policies of those providers. We encourage you to review their notices to understand how they use your data.

E. Do Not Track Signals

At this time, our website does not respond to Do Not Track (β€œDNT”) signals. You can still use other privacy settings and tools to control tracking preferences.

F. Updates to This Cookie Policy

We may update this Cookie Policy periodically to reflect changes in technology, regulation, or our Services. Continued use of our website after such updates indicates your acceptance of the revised terms.

10. GENERAL PROVISIONS

A. Policy Updates

We reserve the right to update this Policy at any time to reflect changes to our practices, legal requirements, or services. When we do, we will revise the β€œLast Updated” date at the top. Material changes will be posted prominently and, where required, communicated directly (such as via email or platform updates). We encourage you to review this Policy periodically. Continued use of our Services after any update constitutes acknowledgement of the revised Policy.

B. Other Policies

For information regarding purchases, refunds, returns, product usage, and your legal rights or obligations as a customer, please review our Terms of Service, Refund & Shipping Policy, and Fan Content Policy & Guidelines. For dispute resolution, arbitration, and governing law, please see the relevant section of our Terms of Service.

C. Contact Us

General inquiries can be submitted through our Contract Form at https://avantris.com/pages/contact or emailed to help@avantris.com. Retailer and sales inquiries can be directed to sales@avantris.com.

All legal notices or questions regarding this Policy should be sent to legal@avantris.com or by mail to:

Avantris LLC

Attn: Legal Team
402 King Farm Blvd, Ste 125 #164
Rockville, MD 20850
United States

D. Contact a Data Protection Authority

If you are concerned about how we may collect and use data, please contact us. You also have the right to contact your local Data Protection Authority (β€œDPA”) if you prefer. To contact your local DPA, refer to the links below:

Please note that we are located in the United States and may not be subject to the jurisdiction of all DPAs listed above; however, we will make a good faith effort to respond to concerns from any user, regardless of location. For users in the United States, concerns may also be raised with your state Attorney General or the Federal Trade Commission (FTC). For Maryland residents, contact the Maryland Attorney General’s Consumer Protection Division at https://www.marylandattorneygeneral.gov.

Last Updated: October 15, 2025

© 2026 Avantris LLC.