Privacy Policy

1. Information We Collect

• Account data: username, email address, password hash, role/verification status, and profile details you provide.
• Authentication data: linked provider identifiers and profile metadata from Discord or Steam when you connect those services.
• Activity data: forum posts, support tickets, moderation records, applications, donation messages, and other content you submit.
• Donation records: payment status metadata, donation amount, donor display preference (including anonymous selections), subscription status, and provider transaction references.
• Reward assignment data: contributor perks, VIP tier status, donor badges, or role assignments connected to completed contributions.
• Security and technical data: IP address, login timestamps, verification events, rate-limit events, and anti-abuse logs.

2. How We Use Information

• Provide and maintain account access, community features, and support services.
• Enforce rules, detect abuse, investigate incidents, and maintain service security.
• Send operational notices such as verification emails, account security alerts, and moderation-related notifications.
• Process and administer donations, recurring support subscriptions, and supporter recognition features.
• Improve service quality through aggregated usage and operational insights.

3. Cookies and Session Data

• We use essential cookies and session storage to keep you signed in, secure your account, and maintain preferences such as authentication/session behavior.
• Security-related session data may include login verification state, anti-abuse checks, and OAuth flow state.
• Disabling essential cookies may prevent portions of the site from functioning correctly.

4. Legal Basis and Consent

• We process data as needed to provide the services you request and to enforce community safety obligations.
• Where consent is requested (including acceptance during registration), processing is based on that consent.
• We may also process data to comply with legal obligations and protect legitimate interests in platform security.

5. Sharing of Information

• We do not sell personal information.
• Information may be shared with service providers (such as hosting, email, or payment processors) only as needed to operate the community.
• When donations or subscriptions are made, payment information is handled by payment processors (such as PayPal) under their own privacy terms.
• We may disclose information when required by law, legal process, or to protect users and platform integrity.

6. Data Retention

• Account and moderation/security records may be retained as long as needed for operations, compliance, and abuse prevention.
• Support and community content may be retained to preserve historical context and ensure consistent moderation.
• When data is no longer needed, it will be deleted or anonymized when reasonably practicable.

7. Public Visibility and Community Features

• Some account and community activity may be publicly visible, including forum content, selected profile details, and donation supporter entries where anonymity is not selected.
• If you choose anonymous contribution display, donor naming may be hidden, but resulting perks or roles (such as VIP status) can still be visible to others through in-game, Discord, forum, or website role indicators.
• Transparency features may summarize moderation or community activity in aggregate or report form.

8. Security Practices

We use reasonable administrative and technical safeguards to protect information. No system can guarantee absolute security, but we continuously apply controls designed to reduce unauthorized access and abuse.

9. Your Choices and Rights

• You may request updates to account information through profile settings where available.
• You may request account assistance, data access, or deletion review through Support.
• Some records may be retained where required for legal, security, or moderation purposes.

10. Region-Specific Privacy Rights (GDPR/CPRA)

• Depending on your location, you may have rights to request access to personal information we hold about you, request correction of inaccurate data, and request deletion of eligible data.
• You may request information about categories of personal information collected, sources, business purposes, and categories of third parties with whom information is shared.
• You may request a portable copy of eligible personal data, and where applicable, object to or restrict certain processing.
• California residents may request details related to CPRA rights, including rights to know, delete, correct, and limit use of certain sensitive personal information where applicable.
• We do not sell personal information, and we do not use personal information for cross-context behavioral advertising as part of community operations.
• To exercise privacy rights, submit a request through Support. We may need to verify identity before fulfilling requests.

11. Children's Privacy

Kentucky Roleplay is not intended for children below the minimum age required by applicable law in your region. If you believe a child has provided personal data inappropriately, contact us through Support.