Legal

Privacy Policy

Last updated: February 6, 2026

1. Information We Collect

Account Information

When you create a DarkLock account, we collect:

  • Username and email address
  • Password (encrypted and hashed)
  • Discord account information (if using Discord OAuth)
  • Profile information (avatar, display name)

Usage Data

We automatically collect information about how you use our service:

  • Log data (IP address, browser type, access times)
  • Device information
  • Feature usage and preferences
  • Security events and audit logs

2. How We Use Your Information

We use the collected information to:

  • Provide Services: Operate and maintain the DarkLock platform
  • Security: Detect and prevent fraudulent activity, monitor security threats
  • Improvements: Analyze usage patterns to improve our services
  • Communications: Send important updates and security notifications
  • Support: Respond to your requests and provide customer service

3. Data Storage and Security

We take data security seriously and implement multiple layers of protection:

  • Encryption: All data is encrypted in transit and at rest using industry standards
  • Password Security: Passwords are securely hashed and never stored in plain text
  • Access Controls: Strict role-based access control (RBAC)
  • Monitoring: Continuous security monitoring and intrusion detection
  • Backups: Regular encrypted backups with 30-day retention
Security note: We use industry-standard encryption and never store passwords in plain text. Two-factor authentication (2FA) is available for all accounts.

4. Data Sharing and Third Parties

We do not sell your personal information. We may share data only in these situations:

  • Service Providers: With trusted partners who help us operate the platform (e.g., hosting providers)
  • Legal Requirements: When required by law or to protect our rights
  • Security Incidents: With law enforcement during active security investigations

5. Your Rights

You have the following rights regarding your data:

  • Access: Request a copy of your personal data
  • Export: Download all your account data (Pro feature)
  • Correction: Update inaccurate information
  • Deletion: Request account deletion at any time
  • Opt-Out: Disable non-essential tracking and analytics

6. Data Retention

We retain your data according to these policies:

  • Active Accounts: Data stored while account is active
  • Deleted Accounts: Personal data deleted within 30 days
  • Logs: Security logs retained for 90 days (Free) or 365 days (Pro)
  • Backups: Backup data purged after retention period

7. Cookies and Tracking

We use cookies for:

  • Authentication: Keeping you logged in securely
  • Preferences: Remembering your settings and theme
  • Analytics: Understanding how users interact with our platform
  • Security: Preventing fraud and detecting suspicious activity

You can disable cookies in your browser, but this may limit functionality.

8. Children's Privacy

DarkLock is not intended for users under 13 years of age. We do not knowingly collect information from children under 13. If we become aware of such data, we will delete it immediately.

9. International Data Transfers

Your data may be transferred and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any significant changes via email or through a notice on our platform. Continued use after changes constitutes acceptance.

11. Contact Us

If you have questions about this privacy policy or your data: