> For the complete documentation index, see [llms.txt](https://policies.creatoryogames.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://policies.creatoryogames.com/policies/privacy-policy.md). # Privacy Policy This privacy policy applies to https\://creatoryogames.com **Last Updated:** 01/10/2026 CreatorYo Creations / Games ("we", "our", "us") values your privacy. This policy explains what personal data we collect, how we use it, how we protect it, and your rights under applicable data protection laws. ## 1. Information We Collect #### 1.1 User Identities **Discord account information:** ID, username, display name, avatar. **Roblox account information:** ID, username, display name, profile picture. **Email account information:** Your email address, a username and display name associated with your account, and the date the email was linked. Email is used for passwordless sign-in through magic links and verification codes. **Account information:** Your username, display name, and any other information necessary to provide and manage your account. #### 1.2 Technical and Security Data * **Device and browser information:** Generic device labels (e.g., "Chrome on Windows"). * **Session IDs:** Login timestamps and session identifiers. * **Authentication Data:** Encrypted 2FA secrets and hashed backup codes. * **Notification Preferences:** Settings tied to your account (e.g., login alerts). * **Security Fingerprints:** Hashed browser snapshots to detect unauthorised new logins. * **Network Data:** IP addresses temporarily processed by Cloudflare to protect the site from attacks. * **Email authentication data:** Temporary authentication challenges, securely protected with magic-link tokens and verification code, expiry information, and related security metadata. These are used to provide passwordless email authentication and are not intended to be retained indefinitely. *** ## 2. How We Use Your Information We use your information to: * Provide and operate the dashboard, linked accounts and Ultimate membership features (including syncing Discord roles where applicable). * Sending transactional emails for sign-in and account security through Resend. * Send dashboard notification emails through Resend where you turn on Email Updates. * Apply basic moderation checks on usernames and display names when you set or change them using email authentication, using a third-party text filter (PurgoMalium) * Maintain account security, detect new logins, enforce session limits and prevent unauthorised access. * Ensure the site runs reliably and protect against attacks and abuse. We do **not** sell, trade, or rent your personal data to third parties. *** ## 3. Data Storage & Security Personal and account data is stored securely in our database. Access is restricted to authorised personnel where access is necessary for legitimate operational, security, or support purposes.\ \ We use reasonable technical and organisational measures, including encryption, hashing, access controls, and other security measures, to protect personal data against unauthorised access, loss, misuse, or disclosure. Authentication credentials such as magic-link tokens and verification codes are designed to be securely protected and are not intentionally stored or logged in plaintext. *** ## 4. Cloudflare We use Cloudflare to help secure and deliver our website. Cloudflare may process: * **Traffic Data:** IP addresses, request metadata, and basic device/browser information to detect malicious traffic. * **Performance Data:** Firewall rules, rate limiting, and caching to improve site performance and reliability. Cloudflare acts as a data processor for security and performance only and does not use your data for advertising. You can view their privacy policy here: [**Cloudflare Privacy Policy**](https://www.cloudflare.com/privacypolicy/). *** ## 4.1 Resend We use Resend to deliver transactional authentication emails, including passwordless magic links and verification codes. If you enable Email Updates, we also use Resend to send dashboard notification emails. When you use email authentication your email address and the information necessary to deliver the authentication email may be processed by Resend for the purpose of sending the email. Resend does not provide us with your email password or access to your email account. You can view the [Resend Privacy Policy](https://resend.com/legal/privacy-policy). *** ## 4.2 PurgoMalum If you use email authentication, when you set or change a username or display name we send that name to PurgoMalium, a third-party text-filtering service, to check for abusive language. PurgoMalum does not receive your email address or other account details. You can read about their service [here](https://purgomalum.com/). *** ## 5. Data Breach Notification In the unlikely event of a security incident affecting your data, we will notify affected users as soon as possible. Notifications will usually appear via the dashboard and our Discord server. We will take breaches seriously and provide guidance on any steps to take. *** ## 6. Data Retention We retain personal data for as long as reasonably necessary for the purposes described in this policy, including providing our services, maintaining security, resolving disputes, and complying with legal or regulatory obligations. Account data will generally be retained while your account remains active. After you delete your account, we will delete all associated personal data as soon as reasonably practicable, unless we are required or permitted by law to retain certain information. Temporary authentication data, such as expired or consumed magic-link challenges and verification codes, may be automatically deleted after they are no longer required for authentication or security purposes. *** ## 7. Your Rights Depending on your circumstances and applicable data protection law, you may have rights including: * **Right to access:** You may request a copy of the personal data we hold about you. * **Right to rectification:** You may request correction of inaccurate or incomplete personal data. * **Right to erasure:** You may request deletion of your personal data, subject to applicable legal exceptions. * **Right to restriction:** You may have the right to request restriction of certain processing. * **Right to data portability:** Where applicable, you may request certain personal data in a portable format. * **Right to object:** You have the right to object to certain types of processing. To delete your account or exercise any of your rights, contact us at [**help@creatoryogames.com**](mailto:help@creatoryogames.com). You also have the right to lodge a complaint with the applicable data protection supervisory authority if you believe your personal data has been handled unlawfully. *** ## 8. Third-Party Links Our website may link to third-party sites. We are **not** responsible for their content or privacy practices. *** ## 9. Changes to This Privacy Policy We may update this privacy policy at any time. Changes take effect immediately upon posting. Please check this page periodically. *** ## 10. Contact Information If you have any questions, concerns, or need further clarification about this Privacy Policy, please contact us: * **Email:** [**help@creatoryogames.com**](mailto:help@creatoryogames.com) * **Communication Server:** [**https://discord.gg/QVdChYe4VK**](https://discord.gg/QVdChYe4VK)