Privacy Policy

PLEASE READ THIS PRIVACY POLICY CAREFULLY. This Privacy Policy ("Policy") describes how Dreamstage RP ("Dreamstage RP," "we," "us," or "our") collects, uses, discloses, retains, transfers, and protects information in connection with your access to and use of the website located at the domain operated by Dreamstage RP, our official Discord server, our FiveM game server, and any related services, features, or content we provide (collectively, the "Service"). By accessing or using the Service, you acknowledge that you have read, understood, and agree to the practices described in this Policy. If you do not agree with any part of this Policy, you must immediately discontinue use of the Service.

1. Scope and Applicability

This Policy applies to all visitors, users, applicants, members, and other persons who access or use the Service ("Users," "you," or "your"). This Policy is incorporated by reference into our Terms of Service and forms a binding agreement between you and Dreamstage RP. This Policy does not apply to information collected by any third party, including through any application or content (including advertising) that may link to or be accessible from or on the Service. Your use of any third-party services is governed exclusively by the privacy policies of those third parties, and we expressly disclaim any responsibility for their data practices.

2. Definitions

• "Personal Data" means any information relating to an identified or identifiable natural person.
• "Processing" means any operation performed on Personal Data, including collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, alignment, restriction, erasure, or destruction.
• "Service Providers" means third parties that process Personal Data on our behalf and under our instructions.
• "Applicable Law" means all laws, regulations, and binding guidance that apply to our processing of Personal Data, including, where relevant, the EU General Data Protection Regulation (GDPR), the UK GDPR, and the California Consumer Privacy Act as amended by the California Privacy Rights Act (collectively, "CCPA/CPRA").

3. Information We Collect

We collect only the information necessary to operate, secure, and improve the Service. The categories of information we may collect include:

• Information You Provide Directly: Information you voluntarily submit through our Service or through our official Discord, including (without limitation) your Discord username and identifier, application responses, in-character information, support correspondence, and any other content you choose to provide.
• Information Collected Automatically: Technical information transmitted by your browser or device when you access the Service, including your Internet Protocol (IP) address, browser type and version, operating system, device type, referring URL, pages visited, dates and times of access, time zone, language preferences, and similar diagnostic data. This information is collected and processed by our infrastructure provider (Cloudflare) for the purposes of operating, securing, and protecting the Service from abuse and unauthorized access.
• Cookies and Similar Technologies: Small data files placed on your device. We use cookies strictly necessary to operate the Service, including a session cookie to maintain authenticated administrator sessions. We do not use cookies for advertising, behavioral tracking, profiling, or third-party analytics.
• Information from Third-Party Platforms: If you interact with us through Discord, YouTube, or other third-party platforms, we may receive limited information about you from those platforms in accordance with their respective privacy policies and the permissions you have granted them.

We do not knowingly collect government identifiers, payment card numbers, financial account details, biometric data, precise geolocation data, health information, or any other category of "sensitive personal information" as defined under Applicable Law.

4. Lawful Bases for Processing (EEA/UK Users)

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with similar data protection requirements, we process your Personal Data only where we have a valid legal basis to do so. The legal bases on which we rely are:

• Legitimate interests in operating, securing, and improving the Service, preventing fraud and abuse, and maintaining our community, where such interests are not overridden by your fundamental rights and freedoms;
• Performance of a contract with you, including the provision of Service features you have requested;
• Consent, which you may withdraw at any time without affecting the lawfulness of processing carried out before such withdrawal; and
• Compliance with a legal obligation to which we are subject.

5. How We Use Your Information

We use the information we collect strictly for the following limited purposes:

• To provide, operate, maintain, secure, monitor, and improve the Service;
• To authenticate administrators and prevent unauthorized access;
• To detect, investigate, prevent, and respond to security incidents, fraud, abuse, harassment, illegal activity, and violations of our Terms of Service or community rules;
• To respond to your inquiries, support requests, applications, and other communications;
• To enforce our Terms of Service, community rules, and other agreements;
• To comply with our legal, regulatory, and contractual obligations and respond to lawful requests from public authorities;
• To protect the rights, property, safety, and well-being of Dreamstage RP, our staff, our Users, and the public; and
• For any other purpose disclosed to you at the time the information is collected, or with your consent.

We do not sell, rent, lease, trade, or otherwise monetize your Personal Data, and we have not sold or shared Personal Data within the meaning of the CCPA/CPRA in the preceding twelve (12) months.

6. How We Share Information

We disclose your information only in the limited circumstances set out below:

• Service Providers: We share information with trusted third-party Service Providers who perform functions on our behalf and are contractually bound (where required by Applicable Law) to process Personal Data only on our instructions and for the purposes for which it was disclosed. Our current Service Providers include, without limitation: Cloudflare, Inc. (hosting, content delivery network, security, and DDoS mitigation); Discord Inc. (community communications and application processing); Google LLC (web fonts via the Google Fonts service); and Google LLC / YouTube (embedded video content).
• Legal and Regulatory Disclosures: We may disclose information if we believe in good faith that disclosure is required or permitted by law, legal process, court order, subpoena, government request, or to enforce our legal rights or defend against legal claims.
• Safety and Protection: We may disclose information when we believe in good faith that disclosure is necessary to investigate, prevent, or take action regarding suspected or actual illegal activity, fraud, situations involving potential threats to the safety of any person, violations of our Terms of Service, or as evidence in litigation.
• Business Transfers: In the event of a merger, acquisition, financing, reorganization, bankruptcy, dissolution, or sale of all or a portion of our assets or operations, your information may be transferred or disclosed as part of that transaction, subject to the receiving party's commitment to honor this Policy or provide notice of any material changes.
• With Your Consent: We may share information with third parties when you have given us your explicit consent to do so.

7. Cookies and Tracking Technologies

The Service uses only strictly necessary cookies required for core functionality (such as maintaining authenticated administrator sessions). We do not use advertising cookies, third-party analytics cookies, behavioral profiling, fingerprinting, or cross-site tracking technologies. Most browsers allow you to refuse or delete cookies through your browser settings; however, doing so may impair certain functions of the Service. Because we do not engage in cross-site tracking, we do not respond differently to "Do Not Track" browser signals.

8. Data Retention

We retain Personal Data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, security, or reporting requirements, or to resolve disputes and enforce our agreements. Server logs are retained for a limited period (typically no longer than thirty (30) days) and then deleted or anonymized. Account, session, and application records are retained for the duration of your active relationship with the community and for a reasonable period thereafter. When Personal Data is no longer required, we will securely delete or anonymize it in accordance with our internal retention policies and Applicable Law.

9. Data Security

We implement and maintain reasonable and appropriate technical, administrative, and organizational security measures designed to protect Personal Data against unauthorized access, alteration, disclosure, loss, misuse, or destruction. These measures include, where appropriate: encryption in transit using industry-standard TLS, access controls, strong password hashing, session management, infrastructure-level firewall and DDoS mitigation, and the principle of least privilege for staff access. However, no method of transmission over the Internet or method of electronic storage is one hundred percent (100%) secure, and we cannot and do not guarantee absolute security. You acknowledge that you provide information to us at your own risk, and you are responsible for safeguarding any credentials you use to access the Service.

10. International Data Transfers

Dreamstage RP and its Service Providers may store and process information in jurisdictions outside your country of residence, including the United States and other countries that may have data protection laws different from those of your jurisdiction. Where required by Applicable Law, we rely on appropriate safeguards (such as the European Commission's Standard Contractual Clauses or equivalent mechanisms) to ensure that transferred Personal Data receives a standard of protection essentially equivalent to that required in your jurisdiction. By using the Service, you acknowledge that your information may be transferred to and processed in such jurisdictions.

11. Your Privacy Rights

Subject to Applicable Law and certain exemptions, you may have the right to:

• Access the Personal Data we hold about you;
• Rectify inaccurate or incomplete Personal Data;
• Erase your Personal Data ("right to be forgotten");
• Restrict or object to the processing of your Personal Data;
• Withdraw consent at any time, where processing is based on consent;
• Data portability, where applicable, in a structured, commonly used, machine-readable format;
• Lodge a complaint with your local data protection authority; and
• Where applicable under the CCPA/CPRA: the right to know what Personal Data we collect, the right to delete, the right to correct, the right to limit use of sensitive Personal Data, and the right to be free from retaliation for exercising your privacy rights.

To exercise any of these rights, please contact us through our official Discord. We will respond to verifiable requests within the timeframes required by Applicable Law. We may need to verify your identity before fulfilling your request, and certain rights may be limited where they conflict with our legal obligations or legitimate interests.

12. Children's Privacy

The Service is strictly intended for adults aged eighteen (18) years or older. We do not knowingly collect, solicit, or maintain Personal Data from any individual under the age of eighteen (18). If you are under eighteen (18), you must not access, use, or submit any information through the Service. If we become aware that we have inadvertently collected Personal Data from a child under eighteen (18) without verified parental consent (where required by Applicable Law), we will promptly delete such information from our records. If you believe a minor has provided us with Personal Data, please contact us immediately so we may take appropriate action.

13. Third-Party Services and Links

The Service may contain links to third-party websites, applications, or services (including but not limited to Discord, YouTube, and other social media platforms). We do not control, are not responsible for, and do not endorse the content, privacy practices, or terms of any third-party services. Any access to or use of such third parties is at your own risk and is governed by their respective privacy policies and terms. We strongly encourage you to review the privacy policy of any third party before providing them with any Personal Data.

14. Do Not Track

Some browsers transmit "Do Not Track" signals to websites you visit. Because there is no industry standard for how to interpret or respond to such signals, the Service does not currently respond to Do Not Track signals. We do, however, refrain from cross-site tracking, behavioral advertising, and third-party profiling regardless of any such signals.

15. Changes to This Policy

We reserve the right to modify, amend, or update this Policy at any time and from time to time, in our sole discretion. The "Effective Date" at the top of this Policy reflects the date of the most recent revision. We will provide notice of any material changes by updating the Effective Date and, where appropriate, by posting a notice on the Service or through other reasonable means. Your continued access to or use of the Service after such changes constitutes your acceptance of the revised Policy. If you do not agree to the revised Policy, you must immediately discontinue use of the Service.

16. Contact Us

If you have any questions, concerns, complaints, or requests regarding this Policy or our privacy practices, please contact us through our official Discord. We are committed to resolving any privacy-related concerns promptly and in good faith.

BY USING THE SERVICE, YOU ACKNOWLEDGE THAT YOU HAVE READ THIS PRIVACY POLICY, UNDERSTAND IT, AND AGREE TO BE BOUND BY ITS TERMS.