Who controls your data
The controller is Delaware North Companies, Inc., 250 Delaware Avenue, Buffalo NY 14202, US. Write to privacy@mythicclash.com for any privacy matter.
Data points gathered
- Connection details your browser transmits automatically: the IP address, the user-agent string, the referring page and a timestamp.
- Approximate geolocation inferred from the IP address, at city or region level.
- Whatever you write when the contact form drafts an email: name, email address, topic and message text.
- The consent setting saved locally on your device.
Purposes
- Operating the site and keeping it safe from abuse, on the basis of legitimate interest.
- Analytics: to see which pages are read, only with consent.
- Marketing, and crediting our referral links when a stay is reserved through them (consent only).
- To answer your messages.
Recipients
Our web host and, if you consent, an analytics vendor handle data on our instructions. Clicking an affiliate link lets the referral network and the destination hotel see your IP address along with a click reference. Those third parties apply their own privacy policies. We do not sell contact-form details.
Retention periods
Access logs are deleted within 90 days. Analytics data is held for no more than 14 months and aggregated where we can. Correspondence by email is purged within 24 months of the closing message. Your consent setting expires in your browser after a year.
Your rights under GDPR
If European or British data law protects you, ask us for a copy of your records, a correction, erasure, a pause on handling, or an export you can hand to another service; you can also object. Switch consent off through Manage cookies and the related processing ends from that moment. A complaint can go to the supervisory authority in your country.
California rights (CCPA/CPRA)
California residents may ask what kinds of personal information sit with us, have it corrected or deleted, and refuse its use for cross-context behavioural advertising. Because affiliate tracking may qualify as sharing, it stays off unless you allow it, and a Global Privacy Control signal counts as a refusal. Using these rights carries no penalty of any kind.
Children and minors
This guide is written for adults. If a message seems to come from someone under 18, we erase it once we notice; children are never a group we try to collect data on.
Changes
We will post any update here with a new revision date.
Last revised 15 October 2026.