Last Updated: August 17, 2026
This Privacy Policy explains how Malborn LLC, a Texas limited liability company doing business as Arcanum Worlds (“Arcanum Worlds,” “we,” “us,” or “our”), collects, uses, stores, and shares personal information when you visit ArcanumWorlds.com (the “Site”), create an account, subscribe to communications, download materials, contact us, or purchase our products.
This Privacy Policy is intended to explain our data practices. Where applicable law requires your consent for particular processing activities, we will request that consent separately.
Malborn LLC is a tabletop roleplaying game publisher based in Texas, United States.
Arcanum Worlds publishes tabletop roleplaying games and related products and uses the Site to:
For purposes of applicable data protection laws, Malborn LLC is generally the controller of personal information collected through the Site.
The information we collect depends upon how you interact with the Site.
We may collect information you voluntarily provide, including:
If you create an account, your password is stored using security protections provided by our website or account infrastructure. We do not normally have access to your password in readable form.
When you purchase a product, we may collect and maintain information concerning the transaction, including:
Payment-card information is generally processed by third-party payment processors rather than stored directly by us.
When you use the Site, certain information may be collected automatically by our website infrastructure, hosting providers, security services, cookies, or similar technologies.
This information may include:
We use this information to operate, secure, troubleshoot, and improve the Site.
We may use personal information to:
We do not use personal information for purposes materially incompatible with those described here unless permitted by applicable law.
Where the European Union General Data Protection Regulation, UK GDPR, or similar laws require us to identify a legal basis for processing personal information, we may rely on one or more of the following bases.
We process information when necessary to enter into or perform a contract with you.
For example, we may use your name, address, payment information, and order details to process a purchase, ship products, or provide access to digital content.
We may rely on your consent where required, particularly for certain marketing communications or non-essential tracking technologies.
Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.
We may process information where necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests.
These interests may include:
We may process or retain information when necessary to comply with applicable laws, including tax, accounting, consumer protection, fraud-prevention, and regulatory requirements.
If you subscribe to our mailing list, request a free download that includes marketing consent, or otherwise choose to receive marketing communications, we may send you:
You can unsubscribe from marketing emails at any time using the unsubscribe link included in our marketing communications.
Unsubscribing from marketing does not prevent us from sending transactional or service-related communications that are necessary in connection with your account or purchases.
These may include:
After a purchase, we may also send a limited follow-up communication inviting you to review the product where permitted by applicable law. Where required, you may opt out of such communications.
We use Brevo as an email and communications service provider.
Brevo may process personal information on our behalf in connection with newsletters, marketing communications, mailing-list administration, and certain transactional communications.
Information processed through Brevo may include:
We use this information to administer our mailing lists, deliver communications, understand whether communications are functioning properly, and evaluate engagement with our emails.
Brevo acts as a service provider or data processor on our behalf for these activities and maintains its own privacy, security, and data-processing practices.
Where required by applicable law, email tracking or similar technologies will be subject to applicable consent requirements.
The Site may use cookies and similar technologies.
Cookies are small files or pieces of information stored on or associated with your device.
We may use cookies for purposes such as:
Some cookies are necessary for the Site to operate and cannot reasonably be disabled through our Site without affecting functionality.
Other cookies or tracking technologies may be optional.
Where applicable law requires consent before placing non-essential cookies or similar technologies, we will request that consent through an appropriate cookie or privacy control.
You may also be able to control cookies through your browser settings. Blocking some cookies may prevent certain Site features from functioning correctly.
We may use third-party services to help operate, measure, secure, or improve the Site.
If we use analytics, advertising, social-media, or similar technologies that collect personal information or place non-essential cookies, we will provide disclosures and consent choices where required by applicable law.
Third-party services may collect information according to their own privacy policies.
We will update this Privacy Policy where appropriate if our use of such technologies materially changes.
When you purchase through the Site, payment information may be processed by third-party payment providers, including providers such as Stripe or PayPal, depending upon the payment method available at checkout.
These providers may receive information necessary to process the transaction, including:
We generally do not store complete payment-card numbers.
Payment providers process information according to their own privacy policies and legal obligations.
We may share information with warehouses, fulfilment providers, postal services, carriers, customs intermediaries, or other providers when necessary to fulfil an order.
Information shared may include:
These providers receive information only as necessary for the services they perform or as otherwise permitted by applicable law.
We may use third parties to provide services necessary to operate our business.
These may include:
These providers may process personal information on our behalf or for purposes necessary to provide their services.
We seek to provide service providers only with information reasonably necessary for the services they perform.
We may link to or interact with third-party platforms such as Kickstarter, BackerKit, or other crowdfunding and fulfilment services.
Information you provide directly to those services is governed by their own privacy policies.
Where a crowdfunding or fulfilment platform provides us with backer or customer information necessary to fulfil a campaign, we may process that information to:
Third-party sites and platforms operate independently from us, and we are not responsible for their independent privacy practices.
We do not sell or rent personal information for money.
We may disclose personal information:
Where applicable privacy law uses terms such as “sale” or “sharing” more broadly than an exchange of personal information for money, we will provide any notices and choices required by that law.
Malborn LLC is based in the United States, and some of our service providers may operate in the United States, European Union, United Kingdom, or other countries.
As a result, personal information may be processed outside the country in which you live.
Where applicable data protection law requires safeguards for international transfers, we or our service providers may use legally recognised mechanisms, such as adequacy decisions, standard contractual clauses, or other permitted safeguards.
The privacy and data protection laws of countries receiving personal information may differ from those in your jurisdiction.
We retain personal information for as long as reasonably necessary for the purposes for which it was collected and to satisfy legitimate business, legal, accounting, tax, security, and contractual requirements.
Retention periods may vary according to the type of information.
For example:
When information is no longer reasonably necessary, we may delete, anonymise, or securely dispose of it, subject to applicable law.
We use reasonable administrative, technical, and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration, or disclosure.
However, no website, electronic transmission, or storage system can be guaranteed to be completely secure.
You are responsible for maintaining the confidentiality of passwords and other account credentials associated with your account.
Depending upon where you live and the laws that apply to you, you may have rights concerning your personal information.
These may include the right to:
We may need to verify your identity before responding to certain requests.
To exercise an applicable privacy right, contact us at info@arcanumworlds.com.
We will respond within the period required by applicable law.
If the GDPR applies to our processing of your personal information, you may have rights including access, rectification, erasure, restriction, portability, and objection as described above.
You may object at any time to processing of your personal information for direct marketing purposes.
Where we rely on consent, you may withdraw that consent at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
You may also have the right to lodge a complaint with the data protection supervisory authority in the country where you live, work, or believe an infringement occurred.
Nothing in this Privacy Policy limits rights granted to you by applicable data protection law.
Residents of certain U.S. states may have additional privacy rights under applicable state law.
Depending upon the law and whether it applies to our business, these rights may include:
Some state privacy laws apply only to businesses meeting specified thresholds. We will honour applicable rights to the extent required by law.
Requests may be submitted to info@arcanumworlds.com.
You may unsubscribe from our marketing emails at any time by using the unsubscribe link in the applicable email.
You may also contact info@arcanumworlds.com to request removal from our marketing list.
We may retain limited information, such as your email address on a suppression list, where reasonably necessary to ensure that we continue to honour your unsubscribe request.
Opting out of marketing does not prevent us from sending communications necessary to administer an order, account, transaction, or legal obligation.
The Site is intended for users 13 years of age or older.
We do not knowingly collect personal information from children under 13.
If you believe that a child under 13 has provided personal information to us, please contact info@arcanumworlds.com so that we can investigate and, where appropriate, delete the information.
Where applicable law imposes a higher age requirement for consent to particular data-processing activities, we will comply with that requirement.
The Site may contain links to websites, applications, or services operated by third parties.
We are not responsible for the privacy practices, security, or content of independent third-party services.
We encourage you to review the privacy policies of third-party services before providing personal information to them.
If Malborn LLC is involved in a merger, acquisition, financing, reorganisation, bankruptcy, sale of assets, or similar corporate transaction, personal information may be transferred as part of that transaction where permitted by applicable law.
Any successor receiving personal information will be required to handle it in accordance with applicable law and any commitments that continue to apply.
We may preserve, use, or disclose personal information where we reasonably believe doing so is necessary to:
We may update this Privacy Policy from time to time to reflect changes to our business, technology, service providers, legal requirements, or privacy practices.
When we update the Policy, we will post the revised version on the Site and update the “Last Updated” date.
Where required by applicable law, we may provide additional notice of material changes.
If you have questions about this Privacy Policy, our privacy practices, or personal information relating to you, or if you wish to exercise an applicable privacy right, please contact:
Malborn LLC
Doing business as Arcanum Worlds
Email: info@arcanumworlds.com
