Darknessdragon · VERSION 2026-10-06.2 · EFFECTIVE 6 October 2026
Privacy Policy
This policy explains how Darknessdragon by Shadowra (“we”) processes personal data when you visit or use Darknessdragon. Contact: support@darknessdragon.chat. The service-provider identity and postal address are in the Imprint.
Data we process and why
- Accounts: username, email address, password hash, account/session identifiers, email-verification status, and the version/date of policy acceptance. We use these to create and secure accounts and provide the service (GDPR article 6(1)(b)); security and abuse prevention may rely on our legitimate interests (article 6(1)(f)).
- Community activity: server/channel memberships and settings, messages, reactions, profile details, attachments, and support tickets. We use these to provide messaging and community features, enforce permissions, handle support, and respond to legal or safety reports (articles 6(1)(b), 6(1)(f), or another applicable basis depending on the activity).
- Security: keyed hashes of request IP addresses, account and ban records, and technical event information used to detect abuse, enforce platform bans, and protect the service (article 6(1)(f)). The application stores IP hashes for account-security matching; hosting infrastructure may separately create technical access logs.
- Payments: PayPal order ID, product description, amount, currency, capture date, and tax estimate are retained for entitlement and accounting. PayPal collects and processes payment credentials directly. We do not receive your full PayPal payment credentials. Accounting and tax records are processed to meet legal obligations (article 6(1)(c)) and for contract administration.
- Preferences and device storage: the browser stores the app state, including account-related identifiers, community/message data received by the client, and preferences, in local storage so the interface can work across reloads. A server session cookie is used for login and security. These are used to provide features you request and maintain the session.
Messages, translation, and visibility
Messages and files are visible to the people or communities you choose to share them with and to authorized administrators when needed to operate, moderate, or secure the service. When you select a display language, message text is sent to this service's backend and processed by the locally hosted LibreTranslate/Argos engine on the same server. The translation feature does not send message text to a paid third-party translation API and does not replace the stored original message.
Recipients and service providers
Data may be accessed by authorized service administrators and shared with: other users as directed by your sharing settings; the hosting/infrastructure provider; the configured email-delivery provider for verification emails; PayPal for payments; and technical providers needed to maintain security and availability. We do not sell personal data. Provider identities and contact details should be supplied on request. PayPal and infrastructure/email providers may process data in countries outside the European Economic Area; where a transfer is made, the controller must rely on and identify a valid transfer mechanism under GDPR chapter V.
Retention
Account, community, and support data is kept while needed to provide the account and features, and afterwards only as needed to handle disputes, security, and legal obligations. Invoice and payment records are retained for the applicable statutory accounting/tax period. IP-hash and ban records are retained for security and enforcement while needed. Session data expires under the server's session policy; local storage remains in your browser until overwritten or cleared. The application currently has no self-service account deletion or published fixed retention schedule. Request access, correction, restriction, objection, portability, or deletion through support@darknessdragon.chat; legal, accounting, and security retention limits may apply.
Your rights and complaints
Subject to legal conditions, you may exercise the rights in GDPR articles 15–22, including access, rectification, erasure, restriction, portability, and objection to processing based on legitimate interests. Where processing is based on consent, you may withdraw it without affecting prior lawful processing. You may complain to the competent data-protection supervisory authority, including the authority for your habitual residence or the authority responsible for the controller's establishment. You also have the right to seek a judicial remedy.
Cookies, local storage, and external services
The site uses a session cookie needed for authentication and security and local storage for app state and preferences. The application does not include a general analytics tracker. The PayPal checkout SDK is loaded when you start checkout; PayPal may use its own cookies or similar technologies under its own notices. Non-essential storage/access must be consented to where required by section 25 TDDDG.
Security and changes
Passwords are stored as password hashes, verification codes are not kept in plaintext after processing, and IP-ban matching uses keyed hashes. Access controls and restricted file endpoints are used to protect stored data. No online service can guarantee absolute security. We update this policy when processing changes; the effective date and policy version appear above.
Legal references: GDPR (Regulation (EU) 2016/679) and section 25 TDDDG.