Privacy Policy — ED5 MMO Studio

1. Scope

This policy explains how ED5 Global handles personal data across mmo.ed5enterprise.com, your account, the Studio editor, Studio Web, managed hosting, the forum, our Discord server and its integrations, and support. ED5 Global is the data controller for that processing.

It does not cover games that our customers build and operate. If you are a player of a game made with our product, the developer of that game controls your data, and you should contact them.

2. Data We Collect

Category	What it includes	Where it comes from
Account data	Email address, display name, password hash or federated identity, account role, plan tier	You, when you sign up or sign in
Purchase data	Order records, plan purchased, amount, currency, payment status, invoice and subscription identifiers, affiliate attribution	Our payment providers; we never receive your full card number
License data	License keys, activation and deactivation records, device identifiers, entitlement tier, and the build identifier written into each game you export (derived from your account ID)	Generated by us and reported by the Studio app
Project and content data	Hosted project metadata, world and content data you author, uploaded media, snapshots, collaborator lists	You, as you use the editor
Support data	Ticket subject and messages, attachments, forum posts and profile	You, when you contact us or post
Discord data	If you connect Discord: your Discord user ID and name, the ED5 roles we give you on our Discord server, whether you are a member, and when we last updated them. If you send a problem report from Studio: its title, description, Studio version and operating system, and an optional recent Studio log	You and Discord, when you connect your Discord account or send a report
AI data	Prompts you submit to Studio AI, generated output, credit reservation and usage records	You, when you use AI features
Usage analytics	Anonymous session identifier, page path, event type (page view, pricing view, plan click, checkout started, download click), plan of interest, device class, referrer, UTM campaign parameters	Collected first-party on our own site
Technical data	IP address, browser and OS, timestamps, error and crash reports, request logs	Automatically, when you use the Service

We do not knowingly collect special-category data (health, biometrics, political or religious belief, and similar). Please do not put such data into tickets, forum posts, or AI prompts.

3. How We Use Your Data

To create and secure your account and authenticate you.
To take payment, issue licenses, and validate activations.
To provide the editor, hosted projects, managed servers, and AI features you have purchased.
To provide support, answer tickets, and operate the forum.
If you connect Discord, to add you to our Discord server and keep your roles there in step with your account.
To send transactional email — license keys, receipts, password resets, security and service notices. These are not marketing and you cannot opt out of them while you hold an account.
To monitor errors, diagnose faults, and improve reliability and performance.
To understand which pages and plans people engage with, in aggregate, so we can improve the site.
To detect, prevent, and investigate fraud, abuse, license misuse, and security incidents.
To pay affiliate commissions and reverse them where a sale is refunded or disputed.
To comply with legal, tax, and accounting obligations.

We do not sell your personal data. We do not share it with third parties for their own independent marketing.

4. Legal Bases

Where the GDPR or UK GDPR applies, we rely on:

Basis	Used for
Contract	Providing the Service you bought — accounts, licenses, hosting, support, transactional email — and optional features you turn on, such as connecting Discord and sending problem reports
Legitimate interests	Security, fraud and abuse prevention, error monitoring, aggregate product analytics, defending legal claims
Consent	Optional advertising and measurement cookies, and marketing email
Legal obligation	Tax, accounting, and lawful requests from authorities

5. Who We Share Data With

We use service providers to run the Service. They process data on our instructions and only for the purposes below:

Category of provider	Purpose
Payment processing	Taking payments, managing subscriptions, and paying affiliate commissions
Authentication, database, and file storage	Account sign-in, account and project records, uploaded media
Cloud infrastructure	Provisioning and running managed game servers
Email delivery	Transactional email such as license keys, receipts, and notices
Error and performance monitoring	Crash and error reports so we can fix faults
AI model providers	Processing Studio AI prompts and returning generated output
Software distribution	Hosting and delivering the installers and release notes you download
Community platform (Discord)	Our Discord server: the community chat widget, adding you to the server with your roles when you connect your account, and posting the problem reports you send from Studio. See section 8
Advertising measurement	Measuring the effectiveness of our advertising, where applicable law permits or where you have consented

We may also disclose data where required by law, to enforce our terms, to protect our rights or someone's safety, or in connection with a merger, acquisition, or sale of assets — in which case we will tell you before your data becomes subject to a different policy.

6. Cookies and Similar Technologies

Purpose	Description
Strictly necessary	Authentication and session cookies that keep you signed in, plus the cached plan-tier cookie that tells the editor what your account is entitled to. The site does not work without these.
Functional	Remembering interface preferences, such as which renderer or layout you chose in the editor.
Analytics	A first-party session identifier used to group page views into a visit. We do not use it to build a cross-site profile of you.
Affiliate attribution	A referral cookie set when you arrive through an affiliate link, so the referring affiliate is credited if you buy.
Advertising	Third-party measurement pixels, used only where applicable law permits or where you have consented.

You can clear or block cookies in your browser. Blocking the strictly necessary ones will prevent you from signing in.

7. Your Projects and Hosted Data

Content you author stays yours. We access it only to operate the Service, to fix a fault you have reported, or where we are legally required to.
Hosted projects are stored in a database provisioned for your project, isolated from other customers' projects.
If you connect your own database, that database is under your control and this policy does not extend to it.
Collaborators you invite can see the project data you share with them. Manage that from your project's collaborator settings.
Deleting a project removes it from the live Service; residual copies in backups age out on the schedule in section 9.

8. Discord

Everything in this section is optional. Discord's own privacy policy covers what Discord does with your data.

Connecting your account. You can connect Discord from Account → Profile. Discord asks you to let us see your Discord user ID and name and to add you to a server. We use that permission once, to add you to the ED5 Discord server, and we do not keep your Discord access token. We never read your messages, your friends list, or the other servers you belong to.
Roles. Once you are connected, we give you roles on our server that match your account: Creator for everyone connected, Subscriber while you have an active paid plan, a role for your desktop license tier, and Affiliate if you are an approved affiliate. Other members of the server can see your roles, so connecting shows them your plan and license tier. We update your roles whenever your account changes and once a day, and we only ever add or remove these roles.
Disconnecting. Disconnect any time from the same page. We remove the roles we manage and delete the link. You stay a member of the server until you leave it. Deleting your ED5 account does the same.
Commands. Bot commands such as /whoami answer privately, so only you see your own roles.
Problem reports. Help → Report a problem in Studio posts your report as a thread in our Discord server's forum, where members of the server can see it. A report contains its type, title and description, your Studio version and operating system, a short reference code we can match to your account, and, unless you untick it, a recent Studio log with tokens, keys and email addresses removed. It names you only through your connected Discord account, if you have one, and never includes your email address. Keep personal data out of the title and description, and contact us if you want a report removed.
Your Discord status. While Studio is open and the Discord app is running on your computer, Studio shows what you are doing (for example, "Building a world in ED5 MMO Studio") on your Discord profile, where people who can see your profile see it too. Your project's name is shown only if you turn that on. This goes straight from your computer to your Discord app and never passes through us. Turn it off in Studio's settings with "Show what I'm doing on Discord".
Discord in your own game. Discord features you add to a game you build, such as announcements, a bot, or Discord sign-in, send your game's data to the Discord server and application you set up. As that game's developer, you control that data (see section 1).

9. Retention

Data	Kept for
Account and license records	While your account is open, then as needed for legal and tax purposes
Purchase and invoice records	As long as tax and accounting law requires, typically several years
Project and media data	While the project exists; removed after deletion, subject to backup rotation
Support tickets	While your account is open, unless you ask us to remove them earlier
Forum posts	While your account is open; when it is deleted, your posts stay up with your name removed so other people's threads still make sense. Ask us if you want a specific post removed
Discord connection	Until you disconnect Discord or your account is deleted
Problem reports	In our Discord server's forum until we remove them. Ask us if you want a report removed
Usage analytics	A rolling window of approximately 180 days, after which rows are pruned automatically
Error and crash reports	A limited retention window set by our monitoring provider
Backups	Rotated on a short cycle and overwritten in the ordinary course

10. Your Rights

Depending on where you live, you may have the right to:

Access the personal data we hold about you and receive a copy.
Correct data that is inaccurate or incomplete.
Delete your data, subject to records we must retain by law.
Restrict or object to certain processing, including processing based on legitimate interests.
Receive your data in a portable, machine-readable format.
Withdraw consent at any time, where processing is based on consent.
Not be discriminated against for exercising a privacy right.

If you have an account, you can download a copy of your account data and request deletion of your account yourself, from the Profile page of your account dashboard. A deletion request takes effect after a 14-day grace period, during which you can cancel it. You can change your cookie choice at any time from the Cookie settings link in the site footer.

To exercise a right, email privacy@ed5mmostudio.com from the address on your account. We will verify your identity and respond within the period required by applicable law, normally 30 days. If you believe we have handled your data improperly, you may also complain to your local data protection authority.

11. International Transfers

We and our providers operate internationally, so your data may be processed in countries other than your own, including the United States. Where we transfer personal data out of the UK, EEA, or another region with transfer restrictions, we rely on an appropriate safeguard such as Standard Contractual Clauses or an adequacy decision.

12. Security

Traffic is encrypted in transit with TLS.
Passwords are stored only as salted hashes; we never store them in readable form.
Sensitive configuration values are encrypted at rest.
Access to production data is limited to staff who need it.
Payment card details are handled by our PCI-compliant payment providers and never touch our servers.

No system is perfectly secure. Use a strong, unique password, keep your license and API keys private, and tell us promptly if you suspect a compromise. If a breach affects your personal data and the law requires notification, we will notify you and the relevant authority within the required timeframe.

13. Children

The Service is not directed at children under 13 (or under 16 where local law sets that age), and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.

14. Changes to This Policy

We may update this policy. We will change the date at the top of the page and, for material changes, take reasonable steps to notify account holders. Continuing to use the Service after a change takes effect means you accept the updated policy.

15. Contact

Privacy questions and rights requests: privacy@ed5mmostudio.com. General support: support@ed5mmostudio.com. Legal notices: legal@ed5mmostudio.com.