Effective Date: July 1, 2026 Last Updated: July 8, 2026
Cipher & Crown LLC (“we,” “us,” or “our”) operates the website ebryanthomas.com (the “Site”). This Privacy Policy explains how we collect, use, and protect information when you visit the Site or subscribe to our mailing list.
By using the Site, you agree to the collection and use of information as described in this policy.
1. Information We Collect
Information you provide directly:
- Email address (when you sign up for our mailing list)
- Name, if you provide it in a contact form or comment
- Any information you include in messages sent through our Contact page
- Payment and order information, if you make a purchase through the Site (e.g., merchandise)
Information collected automatically:
- IP address, browser type, device type, and general location (city/region level)
- Pages visited, time spent on the Site, and referring website
- Cookie data (see Section 4)
We use the following third-party services to help operate the Site and collect some of this information:
- Mailchimp — email list management and newsletter delivery
- Google Analytics — website traffic and usage analytics
- Bluehost — website hosting and technical logs
2. How We Use Your Information
We use the information we collect to:
- Send you the newsletter, updates, and content you signed up for (including delivering any free content, such as sample chapters)
- Respond to messages sent through our Contact page
- Understand how visitors use the Site so we can improve it
- Process orders, if you purchase merchandise or other products through the Site
- Occasionally feature relevant content from other authors we think our subscribers would enjoy
On cross-promotion: From time to time, we may tell you about books or projects from other authors we think you’d like. When we do this, we write and send that email ourselves — we do not share, sell, rent, or otherwise give your email address or any subscriber information to another author, publisher, or third party for their own marketing use.
We do not sell your personal information.
3. Legal Basis for Processing (EU/EEA/UK Visitors)
If you are located in the European Union, European Economic Area, or United Kingdom, our legal basis for processing your information is:
- Consent — for sending marketing emails, which you provide when you sign up and can withdraw at any time
- Legitimate interests — for basic site analytics and security
- Contract — if you make a purchase, to fulfill that order
4. Cookies and Tracking Technologies
The Site uses cookies and similar technologies to:
- Remember your preferences
- Understand site traffic and usage patterns via analytics tools
- Support advertising measurement, if/when we run ads
You can control or disable cookies through your browser settings. Disabling cookies may affect some site functionality. [If a cookie consent banner/plugin is added, reference it here, e.g., “When you first visit the Site, you can accept or decline non-essential cookies via our cookie banner.”]
5. Data Retention
We retain your email address and subscriber information for as long as you remain subscribed to our mailing list. If you unsubscribe, your information is removed from active mailing lists, though some data may be retained in backups or as required by law for a limited period.
Website analytics data is retained according to the retention settings of our analytics provider, typically 14–26 months .
6. Your Rights
If you are in the EU/EEA/UK (GDPR):
You have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your information
- Object to or restrict certain processing
- Request a copy of your data in a portable format
- Withdraw consent at any time (e.g., by unsubscribing)
- Lodge a complaint with your local data protection authority
If you are a California resident (CCPA/CPRA):
You have the right to:
- Know what personal information we collect and how it’s used
- Request deletion of your personal information
- Correct inaccurate personal information
- Opt out of the “sale” or “sharing” of personal information — we do not sell or share your personal informationwith third parties for their own marketing purposes
- Not be discriminated against for exercising these rights
To exercise any of these rights, contact us at info@ebryanthomas.com. You can also unsubscribe from marketing emails at any time using the link at the bottom of any email.
7. Children’s Privacy
The Site is not directed at children under 13 (or 16, where applicable under GDPR), and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.
8. International Data Transfers
Because our service providers (such as Mailchimp and our hosting provider) may process data outside your country of residence, your information may be transferred to and processed in the United States or other countries. These providers maintain appropriate safeguards for such transfers, such as Standard Contractual Clauses where applicable.
9. Security
We take reasonable measures to protect your information, but no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.
10. Third-Party Links
The Site may contain links to third-party websites (such as retailers, Bluesky, or Instagram). We are not responsible for the privacy practices of these third-party sites. We encourage you to review their privacy policies.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The “Last Updated” date at the top reflects the most recent changes. Continued use of the Site after changes constitutes acceptance of the updated policy.
12. Contact Us
If you have questions about this Privacy Policy or wish to exercise any of your rights, contact us at:
Cipher & Crown LLC: info@ebryanthomas.com
This Privacy Policy is a general template and has not been reviewed by an attorney. Given that you expect visitors from the EU and California, and plan to add analytics, advertising, and ecommerce, we recommend having this reviewed by a lawyer familiar with GDPR/CCPA before relying on it, especially once ads or a storefront go live.