Privacy Policy

If you just visit the public site, we don't ask for anything and we don't use advertising or analytics cookies. Like most websites, our server may keep short-lived request logs (such as IP address, browser type and the page requested) to keep the service secure and working.

If you sign in with Roblox, we use Roblox's official OAuth sign-in and request only the openid and profile permissions. Roblox then shares your:

• Roblox user ID
• Username and display name
• Avatar headshot image

We never see your Roblox password, email address, payment details or private messages.

If you are a member of our Roblox community group or Discord servers, our tools process the following to manage roles and moderation:

• Your public Roblox profile (user ID, username, display name, avatar) and the roles you hold in our Roblox group
• Your Discord account ID, username, display name and the roles you hold in our Discord servers
• The link between your Roblox and Discord accounts, if you created one through our account-linking service
• Moderation records, such as a ban, its reason and who issued it

Staff activity. When staff take actions in the dashboard (for example creating a code or changing a role), we record who did what and when in an audit log.

Game data. We also store analytics about our games, such as player counts, visits and revenue. These are aggregate totals from Roblox and don't identify individual players. Code redemptions are counted without recording which player redeemed them.

• To sign you in and decide what you're allowed to see and do in the dashboard
• To keep Discord roles in sync with Roblox group roles across our community
• To moderate our community and enforce bans across our servers
• To keep the service secure, investigate problems and keep staff accountable

We don't use your information for advertising and we don't sell or rent it to anyone.

We only use cookies that are needed to sign you in:

• ds_session keeps you signed in. It lasts up to 30 days and is removed when you sign out.
• ds_oauth_state and ds_oauth_verifier protect the sign-in process and expire after 10 minutes.

We share information only with the services needed to run our tools:

• Roblox, for sign-in and to read and manage our group's roles
• Discord, to read and manage roles and bans in our servers
• Our hosting provider, which runs the servers our tools live on

We may also disclose information if the law requires it, or to protect the safety of our players, staff or community.

• Sign-in sessions expire after 30 days, or sooner if you sign out.
• Cached Roblox and Discord profile details are refreshed regularly and replaced as they change.
• Audit logs and moderation records are kept for as long as they are needed for accountability and community safety.

If you ask us to delete your information, we will unless we need to keep it for one of the reasons above.

• You can sign out at any time, which ends your session.
• You can remove Dreamscape's access in your Roblox account settings, under the apps you've authorized.
• You can ask us for a copy of the information we hold about you, or ask us to correct or delete it, by emailing support@dreamscape-dev.com.

Many Roblox players are young. Our dashboard is intended for Dreamscape staff, and we only receive the basic profile information Roblox shares through its own sign-in. If you are a parent or guardian and believe we hold information about your child that we shouldn't, email support@dreamscape-dev.com and we will delete it.

All traffic to our site is encrypted with HTTPS. Access to the dashboard is limited to people we authorize, and each person sees only what their role allows. No system is perfectly secure, but we work to protect what we hold.

If we change this policy, we will update it on this page and change the effective date above. Significant changes will also be announced in our community.

Questions about this policy or your information? Email support@dreamscape-dev.com.