Privacy Policy

Two kinds of people use CPPSCreator

• Owners and managers have a CPPSCreator account and use the dashboard to create and run servers.
• Players have a penguin on a CPPS someone else runs with CPPSCreator. Each CPPS has its own penguins; they are not CPPSCreator accounts.

We host every CPPS, so we store its players' data. The server's owner, and the managers and staff they choose, can see and act on much of it to run and moderate their server, as described below.

What we collect from owners and managers

• Your username, email address and password. Passwords are stored only as a secure hash, never as you typed them.
• The IP address you signed up and last signed in from, and the IP address and time of changes you make in the dashboard (the audit log).
• What you create: server names, bios, settings, uploaded logos, rooms, items, start screens, music and other files, and the bots, ranks and codes you set up.
• If you buy Premium: Stripe's customer and subscription references, your plan, payment dates and amounts, and the card brand and last four digits Stripe tells us. Your full card number never reaches us.
• Developer API keys you create (stored only as a hash) and the addresses of webhooks you add (stored encrypted).

What we collect from players

• Your penguin's username, nickname and password (stored only as a hash), its items, coins, igloo, buddies, stamps and other game progress.
• The IP address you play from, and when you log in and out.
• What you say in chat, with the room and time, so the server's staff can moderate it.
• Reports you make or that are made about you, and any bans, mutes or kicks.
• On Premium servers: which rooms you visit, what you buy and the coins you earn, used for the server's analytics.

How we use it

• To run the service: sign you in, host servers, save your progress and show you your own data.
• To keep it safe: stop spam and abuse, enforce bans (including IP bans a server's staff set), and look into reports.
• To take payments for Premium and send receipts and billing emails.
• To email you about your account, such as verifying your address, resetting your password or a problem with a payment. We do not send marketing email.
• To understand and improve CPPSCreator as a whole, from totals such as how many servers are online.

We do not sell your data, and we do not use it for advertising.

What a server's owner and staff can see

The owner of a CPPS, and the managers and in-game staff they appoint, can see their own server's players, chat logs, login history (including IP addresses), reports, bans and, on Premium, its analytics. They can also export this data, have events posted to their own Discord channels, or read it into their own tools with the developer API. What they do with it once it leaves CPPSCreator is up to them. Contact a server's owner about how they use your data, or us if you think they are misusing it.

Who we share it with

Only with the services that help us run CPPSCreator, and only what they need:

• Stripe, which takes Premium payments.
• Cloudflare, which stores uploaded files, delivers the website and checks sign-ups are not bots (Turnstile).
• Our email provider, which sends account and billing emails.
• Our hosting providers, which run our servers and database.
• Discord, which receives a server's events when its owner adds a Discord webhook.

We will also share data if the law requires it, or to protect people from harm.

How long we keep it

• Chat logs, login history, moderation logs and resolved reports are kept for 14 days on free servers and 1 year on Premium servers, then deleted.
• Detailed game events for analytics are kept for 30 days, and hourly totals for about a year.
• Your account, servers and penguins are kept until they are deleted.
• Billing records are kept as long as the law requires.

Cookies

We use a cookie to keep you signed in to the dashboard, and your browser remembers whether you prefer light or dark mode. Cloudflare may set a cookie to check you are not a bot. We do not use advertising or tracking cookies.

Your choices and rights

You can see and change most of your data in the dashboard or in game. You can ask us for a copy of your data, to correct it, or to delete your account or a penguin, by emailing support@rocketschat.com. Depending on where you live, you may have other rights, such as objecting to how we use your data or complaining to your data protection authority.

Children

CPPSCreator accounts are for people aged 13 and over. If you believe a child under 13 has given us their data, email support@rocketschat.com and we will delete it.

Security

Passwords and API keys are hashed, webhook addresses are encrypted and everything travels over HTTPS. No service is perfectly secure, so use a password you don't use anywhere else.

Changes and contact

If we change this policy we will update the date at the top, and tell owners by email about big changes. Questions? Email support@rocketschat.com. See also our Terms and Conditions.