Privacy Policy — ED5 MMO Studio

1. Scope

This policy explains how ED5 Global handles personal data across mmo.ed5enterprise.com, your account, the Studio editor, Studio Web, managed hosting, the forum, and support. ED5 Global is the data controller for that processing.

It does not cover games that our customers build and operate. If you are a player of a game made with our product, the developer of that game controls your data, and you should contact them.

2. Data We Collect

Category	What it includes	Where it comes from
Account data	Email address, display name, password hash or federated identity, account role, plan tier	You, when you sign up or sign in
Purchase data	Order records, plan purchased, amount, currency, payment status, invoice and subscription identifiers, affiliate attribution	Our payment providers; we never receive your full card number
License data	License keys, activation and deactivation records, device identifiers, entitlement tier	Generated by us and reported by the Studio app
Project and content data	Hosted project metadata, world and content data you author, uploaded media, snapshots, collaborator lists	You, as you use the editor
Support data	Ticket subject and messages, attachments, forum posts and profile	You, when you contact us or post
AI data	Prompts you submit to Studio AI, generated output, credit reservation and usage records	You, when you use AI features
Usage analytics	Anonymous session identifier, page path, event type (page view, pricing view, plan click, checkout started, download click), plan of interest, device class, referrer, UTM campaign parameters	Collected first-party on our own site
Technical data	IP address, browser and OS, timestamps, error and crash reports, request logs	Automatically, when you use the Service

We do not knowingly collect special-category data (health, biometrics, political or religious belief, and similar). Please do not put such data into tickets, forum posts, or AI prompts.

3. How We Use Your Data

To create and secure your account and authenticate you.
To take payment, issue licenses, and validate activations.
To provide the editor, hosted projects, managed servers, and AI features you have purchased.
To provide support, answer tickets, and operate the forum.
To send transactional email — license keys, receipts, password resets, security and service notices. These are not marketing and you cannot opt out of them while you hold an account.
To monitor errors, diagnose faults, and improve reliability and performance.
To understand which pages and plans people engage with, in aggregate, so we can improve the site.
To detect, prevent, and investigate fraud, abuse, license misuse, and security incidents.
To pay affiliate commissions and reverse them where a sale is refunded or disputed.
To comply with legal, tax, and accounting obligations.

We do not sell your personal data. We do not share it with third parties for their own independent marketing.

4. Legal Bases

Where the GDPR or UK GDPR applies, we rely on:

Basis	Used for
Contract	Providing the Service you bought — accounts, licenses, hosting, support, transactional email
Legitimate interests	Security, fraud and abuse prevention, error monitoring, aggregate product analytics, defending legal claims
Consent	Optional advertising and measurement cookies, and marketing email
Legal obligation	Tax, accounting, and lawful requests from authorities

5. Who We Share Data With

We use service providers to run the Service. They process data on our instructions and only for the purposes below:

Category of provider	Purpose
Payment processing	Taking payments, managing subscriptions, and paying affiliate commissions
Authentication, database, and file storage	Account sign-in, account and project records, uploaded media
Cloud infrastructure	Provisioning and running managed game servers
Email delivery	Transactional email such as license keys, receipts, and notices
Error and performance monitoring	Crash and error reports so we can fix faults
AI model providers	Processing Studio AI prompts and returning generated output
Software distribution	Hosting and delivering the installers and release notes you download
Community platform	The optional community chat widget, if you choose to use it
Advertising measurement	Measuring the effectiveness of our advertising, where you have consented

We may also disclose data where required by law, to enforce our terms, to protect our rights or someone's safety, or in connection with a merger, acquisition, or sale of assets — in which case we will tell you before your data becomes subject to a different policy.

6. Cookies and Similar Technologies

Purpose	Description
Strictly necessary	Authentication and session cookies that keep you signed in, plus the cached plan-tier cookie that tells the editor what your account is entitled to. The site does not work without these.
Functional	Remembering interface preferences, such as which renderer or layout you chose in the editor.
Analytics	A first-party session identifier used to group page views into a visit. We do not use it to build a cross-site profile of you.
Affiliate attribution	A referral cookie set when you arrive through an affiliate link, so the referring affiliate is credited if you buy.
Advertising	Third-party measurement pixels, used only where applicable law permits or where you have consented.

You can clear or block cookies in your browser. Blocking the strictly necessary ones will prevent you from signing in.

7. Your Projects and Hosted Data

Content you author stays yours. We access it only to operate the Service, to fix a fault you have reported, or where we are legally required to.
Hosted projects are stored in a database provisioned for your project, isolated from other customers' projects.
If you connect your own database, that database is under your control and this policy does not extend to it.
Collaborators you invite can see the project data you share with them. Manage that from your project's collaborator settings.
Deleting a project removes it from the live Service; residual copies in backups age out on the schedule in section 8.

8. Retention

Data	Kept for
Account and license records	While your account is open, then as needed for legal and tax purposes
Purchase and invoice records	As long as tax and accounting law requires, typically several years
Project and media data	While the project exists; removed after deletion, subject to backup rotation
Support tickets and forum posts	While your account is open, unless you ask us to remove them earlier
Usage analytics	A rolling window of approximately 180 days, after which rows are pruned automatically
Error and crash reports	A limited retention window set by our monitoring provider
Backups	Rotated on a short cycle and overwritten in the ordinary course

9. Your Rights

Depending on where you live, you may have the right to:

Access the personal data we hold about you and receive a copy.
Correct data that is inaccurate or incomplete.
Delete your data, subject to records we must retain by law.
Restrict or object to certain processing, including processing based on legitimate interests.
Receive your data in a portable, machine-readable format.
Withdraw consent at any time, where processing is based on consent.
Not be discriminated against for exercising a privacy right.

To exercise a right, email privacy@ed5mmostudio.com from the address on your account. We will verify your identity and respond within the period required by applicable law, normally 30 days. If you believe we have handled your data improperly, you may also complain to your local data protection authority.

10. International Transfers

We and our providers operate internationally, so your data may be processed in countries other than your own, including the United States. Where we transfer personal data out of the UK, EEA, or another region with transfer restrictions, we rely on an appropriate safeguard such as Standard Contractual Clauses or an adequacy decision.

11. Security

Traffic is encrypted in transit with TLS.
Passwords are stored only as salted hashes; we never store them in readable form.
Sensitive configuration values are encrypted at rest.
Access to production data is limited to staff who need it.
Payment card details are handled by our PCI-compliant payment providers and never touch our servers.

No system is perfectly secure. Use a strong, unique password, keep your license and API keys private, and tell us promptly if you suspect a compromise. If a breach affects your personal data and the law requires notification, we will notify you and the relevant authority within the required timeframe.

12. Children

The Service is not directed at children under 13 (or under 16 where local law sets that age), and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.

13. Changes to This Policy

We may update this policy. We will change the date at the top of the page and, for material changes, take reasonable steps to notify account holders. Continuing to use the Service after a change takes effect means you accept the updated policy.

14. Contact

Privacy questions and rights requests: privacy@ed5mmostudio.com. General support: support@ed5mmostudio.com. Legal notices: legal@ed5mmostudio.com.