Privacy notice

Who we are and our role

This app and the Dragon SMP server are operated by Dragonsmpof ("we", "us"), trading as Dragon SMP. For the personal data described in this notice, Dragonsmpof is the data controller — we decide what data is collected and why. You can reach us at abdullahaziz50900@gmail.com for any privacy question or request.

What personal data we collect

• • Account data: email address, password (stored only as a secure hash), player name and the date you signed up.
• • Application data: Minecraft gamertag, platform (Java or Bedrock), chosen role, your assigned task, your agreement to the terms, and the photo or video you upload as proof.
• • Communications: lobby chat messages, appeals, reports, staff notes, warnings, and emails you send us or we send you.
• • Purchase data: which product you bought, the price, the currency, the subscription status, and any custom Discord role name or name color you chose. Card numbers never reach us — payment details are collected and stored by Paddle.
• • Technical data: IP address, device and browser information, and error or usage logs generated when you use the app.

Why we use it, and our legal basis

• • To create and secure your account and let you sign in — necessary to perform our contract with you.
• • To review your whitelist application, verify your uploaded proof (including automated image and video checks), and add approved players to the server whitelist — contract performance.
• • To email you your application result, server details when approved, and important server notices — contract performance.
• • To run the store: process orders, manage subscriptions and trials, and deliver purchased perks — contract performance.
• • To moderate chat, filter personal information and profanity, handle reports, warnings and appeals, and keep the server safe — our legitimate interest in a safe community, and legal obligation where applicable.
• • To prevent fraud and abuse, keep audit logs, and fix errors — our legitimate interest in a secure service.
• • To send optional marketing or community updates, where we do so — your consent, which you can withdraw at any time.

Who we share data with

• • Paddle.com — our Merchant of Record and reseller. Paddle handles orders, payments, subscription management, tax compliance, invoicing, refunds and payment-related customer service.
• • Hosting, database, storage and email providers that run the app and send our emails on our behalf.
• • AI processing providers used only to check whether an uploaded photo or video matches the assigned task, and to generate task reference images.
• • Discord, where a purchased role name, color or chat tag is applied to your Discord account.
• • Professional advisers (such as legal or accounting) where needed, and authorities or regulators where we are required by law.

We never sell your data

We do not sell your personal data, and we do not share it with advertisers.

International transfers

Our providers may process data outside your country, including in the United States and the European Union. Where data leaves the UK or EEA, transfers rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

How long we keep it

• • Account and application data: while your account is active, then deleted or anonymised within 12 months of closure.
• • Uploaded photos and videos: kept while your application is under review and up to 12 months after a decision, so appeals can be handled.
• • Chat messages, reports, warnings and appeals: up to 24 months for moderation history.
• • Purchase and subscription records: kept as long as tax and accounting law requires (commonly 7 years).
• • Technical and error logs: normally up to 12 months.

Your rights

Subject to the law of your country, you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to another provider. You can withdraw consent for optional messages at any time. Email abdullahaziz50900@gmail.com and we will respond within one month. If you are in the UK or EEA you can also complain to your local data protection authority.

Children

Dragon SMP is a community server, but you must not share your age, real name, address, phone number, school or social media handles in the app or chat. If you believe a child has given us personal data we do not need, contact us and we will remove it.

Security

We use appropriate technical and organisational measures: encrypted connections, hashed passwords, row-level database access rules so players can only see their own records, restricted staff and admin access, signed time-limited links for uploaded media, and audit logging of admin actions.

Cookies and similar technologies

We use essential cookies and browser storage only — to keep you signed in, to remember your player name in the lobby chat, and for the secure checkout provided by Paddle. We do not use advertising or tracking cookies. You can clear this storage in your browser at any time, though you will then be signed out.

Changes to this notice

We may update this notice. The date at the top shows when it last changed, and continued use of the app means you accept the current version.