Privacy Policy

1. Introduction

Welcome to DreamCode Interactive.

This Privacy Policy explains how DreamCode Interactive (“DreamCode”, “we”, “us”, or “our”) collects, uses, stores, protects and otherwise processes personal information when you use our websites, applications, games and services.

This Privacy Policy applies to the DreamCode Interactive ecosystem, including:

• https://dreamcode-interactive.site — the main DreamCode Interactive website;
• https://hub.dreamcode-interactive.site — DreamCode Hub, our digital store and game library;
• https://play.dreamcode-interactive.site — DreamCode Cloud, our cloud-gaming service;
• DreamCode OS and associated software;
• DreamCode games and other digital products;
• DreamCode accounts;
• customer support and communications;
• other websites, applications or services that expressly refer to this Privacy Policy.

For privacy questions, please contact:

hello@dreamcode-interactive.site

2. Our approach to privacy

We want our privacy practices to be straightforward.

We collect information primarily because we need it to operate your account, provide games and services, process purchases, provide customer support, maintain security and comply with legal obligations.

We do not sell your personal information to third parties.

We do not intentionally collect more information than we reasonably need for the purposes described in this Privacy Policy.

Where the General Data Protection Regulation (“GDPR”) applies, we process personal data in accordance with applicable data-protection law.

3. What is personal data?

“Personal data” means information relating to an identified or identifiable individual.

Depending on how you use DreamCode, this may include information such as an email address, account identifier, IP address, device information, transaction information or information associated with your use of our services.

Some information may be technical information that does not identify you by itself but may become personal data when combined with other information.

4. Information you provide to us

4.1 Account information

When you create or use a DreamCode account, we may collect:

• email address;
• username or display name;
• account identifier;
• authentication information;
• account creation date;
• account status;
• games associated with your account;
• account preferences;
• information you provide when contacting support.

We may also maintain records of account-related events necessary to operate and secure the account.

4.2 Purchase information

When you purchase a product through DreamCode Hub, information associated with the transaction may include:

• purchaser name;
• email address;
• country or region;
• purchased product;
• transaction identifier;
• purchase date;
• purchase price;
• currency;
• refund status;
• transaction status.

Payment-card and other payment information is handled through our payment provider rather than being stored directly by DreamCode unless specifically stated otherwise.

4.3 Customer support information

If you contact us, we may collect:

• your email address;
• your name or username if provided;
• the contents of your message;
• attachments you voluntarily provide;
• information necessary to investigate your request;
• relevant account or purchase information.

We use this information to respond to you and maintain support records.

4.4 Information you provide voluntarily

You may voluntarily provide additional information when interacting with DreamCode.

For example, you may provide information when submitting feedback, reporting a bug, contacting us, participating in a promotion or otherwise communicating with us.

You should not provide sensitive personal information unless it is genuinely necessary for your request.

5. Information collected automatically

When you access DreamCode websites or services, certain information may be collected automatically.

This may include:

• IP address;
• browser type;
• browser version;
• operating system;
• device type;
• device identifiers where technically necessary;
• language settings;
• time zone;
• date and time of access;
• requested pages or resources;
• referring website;
• basic network information;
• error information;
• diagnostic information;
• security-related information.

We may use this information to operate the service, identify technical problems, prevent abuse and protect our infrastructure.

6. Game-related information

When you use a DreamCode game or related service, we may process information necessary to provide the game.

Depending on the particular game, this may include:

• account identifier;
• game identifier;
• game ownership or entitlement;
• game progress;
• saved-game information;
• achievements;
• game settings;
• session information;
• technical diagnostic information.

Individual games may collect additional information.

Where a particular game has a separate privacy notice, that notice will apply to the relevant processing.

7. DreamCode Cloud

DreamCode Cloud allows selected games to be played remotely through supported devices.

To provide DreamCode Cloud, we may process:

• your DreamCode account identifier;
• selected game;
• cloud-gaming session information;
• session start and end times;
• device and browser information;
• IP address;
• network information;
• technical performance information;
• error and diagnostic information;
• information necessary to enforce access restrictions and prevent abuse.

Cloud-gaming sessions may require temporary processing of technical information associated with the game session.

We will not intentionally use cloud-gaming information to create detailed behavioural profiles unless this is specifically explained to you and permitted by applicable law.

8. DreamCode OS

DreamCode OS may process technical information required to:

• operate the operating environment;
• authenticate services;
• provide updates;
• maintain security;
• diagnose errors;
• maintain compatibility;
• provide DreamCode services.

The exact information processed may depend on the version of DreamCode OS and the features installed or enabled.

Where DreamCode OS includes third-party software, that software may have separate privacy practices.

9. How we use personal data

We may use personal data for the following purposes.

Providing our services

We process information to:

• create and manage accounts;
• authenticate users;
• provide access to purchased products;
• maintain your game library;
• provide DreamCode Cloud;
• provide DreamCode OS;
• provide games;
• synchronise necessary account information;
• provide requested features.

Processing transactions

We process information to:

• identify purchases;
• fulfil purchases;
• maintain purchase records;
• provide access to purchased products;
• process refunds;
• resolve payment disputes;
• prevent fraudulent transactions.

Customer support

We use information to:

• answer questions;
• investigate problems;
• troubleshoot technical issues;
• verify account ownership;
• investigate purchase problems;
• investigate refund requests.

Security

We may process information to:

• detect suspicious activity;
• prevent fraud;
• prevent abuse;
• protect accounts;
• protect our infrastructure;
• investigate security incidents;
• enforce access restrictions;
• protect other users.

Improving our services

We may use technical and aggregated information to:

• identify bugs;
• understand technical failures;
• improve performance;
• improve reliability;
• understand which features are used;
• develop new features.

Where possible, information used for analytical purposes will be aggregated or otherwise minimised.

Legal obligations

We may process information where necessary to:

• comply with applicable law;
• respond to lawful requests;
• maintain legally required records;
• establish or defend legal claims;
• protect our legal rights.

10. Legal bases under the GDPR

Where the GDPR applies, we rely on one or more lawful bases for processing.

Contract

We may process information where processing is necessary to provide a service you requested or to perform a contract with you.

Examples include:

• creating your account;
• providing purchased games;
• providing DreamCode Cloud;
• providing customer support related to your purchase;
• maintaining your game library.

Legal obligation

We may process information where necessary to comply with legal obligations, such as accounting, tax, consumer-protection or legal-reporting requirements.

Legitimate interests

We may process information where necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms.

Examples may include:

• protecting our services against abuse;
• preventing fraud;
• securing our infrastructure;
• troubleshooting;
• maintaining service reliability;
• defending legal claims.

Consent

Where required, we may rely on your consent.

For example, certain optional cookies or marketing communications may require consent.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that took place before withdrawal.

The GDPR requires organisations to identify an appropriate lawful basis and apply principles including lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, security and accountability.

11. Payment processing and Paddle

DreamCode uses Paddle for payments.

Paddle may act as the Merchant of Record for applicable transactions and may therefore process purchaser information for payment processing, transaction management, tax handling, fraud prevention, refunds and related purposes.

This means that certain payment-related information is processed directly by Paddle under Paddle's own privacy documentation and legal terms.

DreamCode does not need to receive or store your complete payment-card information in order to provide a purchased game.

For information about Paddle's own processing, please refer to Paddle's current legal documentation.

12. Service providers and infrastructure

DreamCode uses third-party providers to operate its infrastructure.

Our current infrastructure includes:

Render

Render is used for application hosting and related infrastructure.

MongoDB Atlas

MongoDB Atlas is used for database infrastructure associated with the DreamCode ecosystem and platform.

Neon

Neon is used for database infrastructure associated with game-account systems.

Paddle

Paddle is used for payments, transaction processing and Merchant of Record services.

We may add, remove or replace service providers as DreamCode develops.

Where a third party processes personal data on our behalf, we will use appropriate contractual and organisational arrangements where required by applicable law.

Under the GDPR, a processor acting on behalf of a controller must be subject to an appropriate contract or other binding legal arrangement and must provide appropriate guarantees concerning data protection and security.

13. Data location

Our primary DreamCode servers and databases are configured in Frankfurt, Germany, where the applicable infrastructure provider supports that configuration.

However, the location of our primary infrastructure does not necessarily mean that every service provider or subprocessor involved in operating DreamCode processes information exclusively in Germany.

Third-party providers may process information in other countries in accordance with their own infrastructure and subprocessors.

Where personal data is transferred outside the European Economic Area and GDPR transfer requirements apply, we will use an appropriate lawful transfer mechanism and safeguards.

14. Data retention

We retain information only for as long as reasonably necessary for the purpose for which it was collected.

Different information may have different retention periods.

For example:

• account information may be retained while your account remains active;
• purchase information may be retained for accounting, tax and transaction purposes;
• support communications may be retained for a reasonable period to maintain support history;
• security logs may be retained for a reasonable period for security and abuse prevention;
• information required by law may be retained for the legally required period.

When information is no longer necessary, we may delete it, anonymise it or securely archive it where appropriate.

Deleting an account does not necessarily mean that every associated record can be immediately deleted. Certain information may need to be retained to comply with legal obligations, prevent fraud, resolve disputes or establish or defend legal claims.

15. Data security

We take reasonable technical and organisational measures designed to protect personal data.

Depending on the service, these measures may include:

• access controls;
• authentication controls;
• encrypted connections;
• restricted database access;
• server security;
• logging;
• monitoring;
• backups;
• security updates;
• least-privilege access;
• incident-response procedures.

No internet-based service can guarantee absolute security.

If we become aware of a personal-data breach that triggers a legal notification requirement, we will take the steps required by applicable law.

16. Data sharing

We may disclose information to:

• infrastructure providers;
• payment providers;
• hosting providers;
• database providers;
• security providers;
• customer-support providers;
• professional advisers;
• authorities where legally required;
• courts or other legal bodies where necessary;
• successors in connection with a merger, acquisition, restructuring or sale of relevant assets.

We do not sell personal data.

17. Business transfers

If DreamCode or substantially all of its assets are acquired, merged or reorganised, personal data may be transferred as part of that transaction.

Where required by law, affected users will receive appropriate notice.

18. Your GDPR rights

Where GDPR applies, you may have rights including:

Right of access

You may request information about whether we process your personal data and request a copy of applicable personal data.

Right to rectification

You may request correction of inaccurate or incomplete personal data.

Right to erasure

In certain circumstances, you may request deletion of your personal data.

Right to restriction

In certain circumstances, you may request that we restrict processing.

Right to object

You may object to certain processing based on legitimate interests or other applicable grounds.

Right to data portability

Where applicable, you may request personal data you provided to us in a structured, commonly used and machine-readable format.

Right to withdraw consent

Where processing relies on consent, you may withdraw consent at any time.

Right to complain

You may lodge a complaint with a competent data-protection supervisory authority.

19. Exercising your rights

To exercise a privacy right, contact:

hello@dreamcode-interactive.site

Please describe your request clearly.

We may request information necessary to verify that you are the account holder or data subject.

We will handle requests within the periods required by applicable law.

20. Automated decision-making

DreamCode does not currently intend to make decisions producing legal or similarly significant effects about users solely through automated processing.

If this changes, we will provide the information required by applicable law.

21. Children's privacy

DreamCode services are not intentionally designed to collect unnecessary personal information from children.

If a service is subject to an age requirement, that requirement will be communicated through the relevant service.

If you believe that a child has provided personal information to DreamCode in circumstances where this was not appropriate, contact us at:

hello@dreamcode-interactive.site

22. International users

DreamCode may be accessible from countries outside the European Union.

Different privacy laws may apply depending on where you live.

Where GDPR applies, we will process personal data in accordance with applicable GDPR requirements.

23. Third-party websites

DreamCode websites may contain links to third-party websites.

We are not responsible for the privacy practices of websites that we do not operate.

You should review the privacy policy of any third-party service before providing personal information to it.

24. Changes to this Privacy Policy

We may update this Privacy Policy when:

• our services change;
• our infrastructure changes;
• legal requirements change;
• we introduce new processing activities;
• we add or remove service providers.

The latest version will be published on the applicable DreamCode website.

25. Contact

For privacy questions:

DreamCode Interactive

Email: hello@dreamcode-interactive.site