legendhaven.com and its pages (passes, books, program, contest, exhibitors, press kit). The venue at venue.legendhaven.com: rooms, voice, chat, messages, cards and host lists.

The convention itself: main stage, sessions, workshops, the expo, and anything streamed or replayed.

Author and business nooks: applications at apply.legendhaven.com, nook and booth content, author cards, element cards and the convention app.

Appearances: livestreams, interviews, featured-author posts, the LegendHaven Replay Podcast, and recorded workshops.

Contributions: LegendHaven Magazine articles, contest entries, shared-world stories and anthology submissions.

The LegendFiction community on Mighty Networks has its own Terms & Conditions. Where you're in both places, both apply. A signed agreement with us (an anthology contract, for example) wins over these terms where the two differ.

LegendHaven & LegendFiction is for people aged 16 and over.

People aged 14 or 15 may join the community with a parent or guardian's email and phone number. We use those only to contact them about the young person's safety.

People under 14 without a parent or guardian can't join, and if we learn we hold data from someone under 14, we delete it.

Only adults (18+) can apply for a nook, host a room, appear as a guest, or enter a contract with us. A younger writer can take part in contests or anthologies only with a parent or guardian's written consent.

Be kind, especially when you disagree. Debate ideas, never people.

Keep public spaces PG-13. No sexually explicit, gory or graphically violent material in public rooms, chat, pins or nooks. Sensitive themes in your books are welcome in your nook with a clear content note.

No harassment, threats, hate, impersonation, spam or scams. No unwanted contact after someone has blocked you or said no.

Respect privacy. Don't record, screenshot or share other people's voice, messages or personal details without their permission.

Only post what you have the right to post.

Use the report button or contact us if something is wrong. Reports involving a young person also bring in their parent or guardian.

We may remove content, mute, suspend or remove anyone who breaks these rules, and we may report serious harm to the authorities. For anything obvious and serious, we act first and explain after.

show, copy, format and resize what you give us (for example, crop a cover or re-host an image on our site);

use it, and your name, likeness and bio as you gave them to us, to present and promote LegendHaven and your part in it: on our websites, the venue, the convention app, emails, social media, podcasts, video and press materials;

make short clips, quotes, thumbnails and excerpts from sessions or interviews you took part in.

This permission is non-exclusive (you can do anything you like with your work elsewhere), worldwide, and free. It lasts until you withdraw it under section 8, with the limits explained there.

We'll credit you. Wherever practical, your work carries your name and a link you chose.

The venue area is voice only and isn't recorded. No camera, mic off by default. Your floor position is shared live and never stored.

Stage sessions, workshops, livestreams and interviews are recorded. We say so before they start. They may stream live on YouTube and be replayed on YouTube, the LegendHaven Replay Podcast and our other channels, and cut into clips.

If you're a guest, speaker or host, joining a recorded session means you agree to be recorded and for the recording to be used as described in section 6. If you'd rather not be, tell us before it starts. We'll keep you off camera, off the replay, or find another format.

If you're in the audience of a recorded session, your name, face, voice or comments may appear if you choose to speak, turn on a camera, or comment in a live chat. Staying muted with your camera off keeps you out of it.

Photo touch-ups. For interviews and promotion we may clean up, resize or enhance a photo you send us.

Your presence on our websites. We'll make every reasonable effort to remove you: your author card, nook, bio, photo, books, links and profile on legendhaven.com, the venue and the convention app. We aim to finish within 30 days of your request.

Past promotions stay. Promotion that already went out when you were part of LegendHaven stays as it was: emails already sent, posts already published, printed materials, press coverage, and anything other people have shared. We can't pull those back, and we won't pretend we can.

Backlinks and text references. Where we can edit it, we'll remove links to you and written references to your name: on our websites, in blog and Substack posts, in video and podcast descriptions, and in social posts we control. We'll do this where possible. Some platforms don't allow edits after posting, and some references are part of a record (a list of past winners, for example).

Videos and recordings. We'll review these case by case, and tell you what we decided and why. Depending on the recording, we may remove it, set it to unlisted or private, cut your part out, remove your name from the title, description and thumbnail, or leave it as it is. We'll weigh your reasons, whether other people's work in the same recording would be lost, and what can realistically be edited. Where your safety is at risk, we'll lean towards taking it down.

Published books and anthologies follow the agreement you signed. Stories already printed or sold stay in print as that agreement says.

A copy of your data. If you want a copy of everything we hold about you, ask. We'll make every reasonable effort to gather it from every place we keep it (see the Privacy Policy) and send it to you in a common, readable format within 30 days. In the venue you can download your venue data yourself at any time: You › Account › Download my data.

What we keep, and why. We may keep a small record that you asked to leave (so we don't add you back by mistake), records we're legally required to keep (payments and tax), and safety records such as reports and bans. Our full retention rules are in the Privacy Policy.

How to ask. Use legendfiction.com/contact and say what you'd like removed or sent. We'll confirm we've received it, may ask you to confirm it's really you, and will tell you when it's one.

Your account. Your email (never shown to others unless you choose to share it), how you signed in (email link or code, email and password, or Google), your role (member, host, moderator or admin), your access level, and your age band. Passwords are stored hashed by our sign-in provider, Supabase; the venue never stores them.

Your profile. Everyone at the venue can see your display name, your face (a painted preset, or for hosts and admins a picture they upload), your "About you" line, and your profile link if you add one.

Voice is carried live through LiveKit and never recorded. Your floor position is shared live with people in the same room and never stored. Room chat is stored and shown to the people in that room. The room's host and our admins can export it.

Direct messages between two people. Our admins can't read them unless one of the two reports a message, and then they see only that message. "Share my email with [host]": only if you press it, your email goes on that host's list, with a record of when and to what wording you agreed. The host can download the list.

Cards: if two people accept each other's card, each keeps the other's name, face, email, profile link, first line of "About you", role, and the room where they swapped.

Reports, blocks and mutes, so we can act on them. Moderator and admin actions go in a moderation log.

Visits: when you enter and leave a room, so hosts can see attendance. Public pages show counts only, never who.

Uploads: hosts and admins can upload pictures. Members can't upload files.

Google sign-in. If you choose "Continue with Google", Google shares your name, email address and profile picture (the standard "email" and "profile" permissions), and nothing else. The venue uses only your email, to create your account, sign you in and match you to invites or codes. Supabase keeps what Google sent with your account record. We don't sell it, share it with anyone except Supabase, use it for advertising, or use it to develop, improve or train generalized AI or machine-learning models. No person reads it except to keep the service secure, to comply with the law, or with your permission. It's deleted when you delete your account, and you can remove LegendHaven's access any time in your Google Account security settings.

LegendHaven's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Technical data.

IP address, used briefly to stop abuse (for example, too many wrong codes) and never stored in plain form.

Cookies: lh_pass keeps you signed in for up to 12 hours. lh_preview is used only by our staff to preview rooms. Both are sent only to our own server and page scripts can't read them. We use no advertising or tracking cookies.

Your browser's storage keeps settings (theme, sound), which hints you've seen, whether this device has signed in before, and your name, face, email and role so the venue can greet you next time. It stays on your device and is only ever sent to our own server. Server error logs, which can include an account ID but never passwords, sign-in tokens, cookies or email addresses.

To run LegendHaven: sign you in, carry your voice and messages, run applications, take payments, and put on the con. (We need it to provide what you asked for.)

To promote the con and the people in it: author cards, interviews, clips and posts. (Your consent, which you can withdraw. See the Terms, section 8.)

To keep everyone safe: moderation, abuse limits, and contacting a guardian about a young person's safety. (Our legitimate interest in a safe event.)

To send you updates you signed up for. (Your consent. Unsubscribe any time.)

To keep records the law requires, such as payments and tax.

Supabase Venue: database, sign-in and file storage

Cloudflare: Hosting, security, abuse limits, page analytics, the application form

LiveKit: Live venue voice (not recorded) and floor positions

Onepage: Hosts legendhaven.com and legendfiction.com, and the images on them

Airtable: Nook applications and author records

Fillout: Contact, feedback and featured-author forms

Mighty Networks: Passes, the expo, and the LegendFiction community

Stripe: Payments

MailerLite, Substack, MailerSend: Email lists, newsletters, sign-in and application emails

Google: Email, "Continue with Google", web fonts

Riverside, YouTube: Recording, livestreaming and hosting sessions and interviews

Cal.com: Booking guests and workshop recordings

Postiz: Scheduling our social posts

AI tools (such as Anthropic's Claude, OpenAI's ChatGPT and Clarity AI): Helping us draft, organise our admin, and maintain the code. We use them under business terms that don't let them train on your data where that option exists.

jsDelivr, Mixkit, DuckDuckGo: Code libraries, sound effects, and the small icon by a profile link (it receives only that link's website name)

Venue direct messages: 7 days (a reported message until the report is dealt with)

Venue room chat: 3 days after the event ends (rooms with no end time: 3 days after each message)

Chat mutes: 24 hours

Venue sign-in cookie: Up to 12 hours

Room visits: 30 days

Reports and moderation log: 30 days after a report is dealt with; bans are kept as a safety record

Venue account, profile, list sign-ups and cards: Until you delete your account

Record of a deletion: 30 days (just your account ID and the steps that ran)

Encrypted venue backups: 30 days

Nook applications: Until 12 months after your last con with us, or until you ask us to delete them

Collaborator working notes: While we're working together, and until you ask us to delete them

Email list: Until you unsubscribe

Payment records: As long as tax law requires (usually 7 years)

Recordings and published promotion: See the Terms, section 8

See what we hold about you and get a copy of it. In the venue: You › Account › Download my data. For everything else, ask us.

Correct anything wrong. In the venue: You › Profile.

Delete your data. In the venue: You › Account › Delete my account, which removes your account, profile, direct messages, blocks, visits, list sign-ups, access, contact requests, any face you uploaded, and the cards you hold. Cards others already received from you stay with them. For everything else, ask us.

Withdraw consent to promotion or email at any time. What happens to past promotion is set out in the Terms, section 8.

Object to how we use your data, or ask us to limit it.

Complain to your local data protection authority if you think we've got it wrong. We'd like the chance to put it right first.

Ask through legendhaven.com/contact. We may ask you to confirm it's you, and we'll answer within 30 days. If we say no to part of a request, we'll tell you why.