Privacy Policy

Last updated: October 21, 2026

This Privacy Policy explains how we handle information when you use Dawn, the Dawn website, and related services (collectively, the “Services”). Where you have rights under laws such as the EU/UK GDPR, the Swiss FADP, or state laws like the CCPA/CPRA, this Policy describes them and how to exercise them.

1. Data We Collect

Account and licensing data

• Platform identity: your Discord user ID and username, used to bind a License to you on purchase.
• License state: plan, purchase date, expiration, session status, and enforcement history (e.g. prior revocations).
• Payments: handled by third-party payment processors; we receive a transaction reference and product, never full card details. Processor sub-processors handle card data under their own policies.

Operational and technical data

• Crash and error traces: the Software writes timestamped traces (e.g. bridge_boot.txt) locally on your machine. We only receive these if you choose to share them with support.
• Session data: per-session random tokens and the attached client identifier — generated locally, published locally, cleared on exit, never reported to us.
• Security data: IP addresses and rate-limit counters processed by protective layers (e.g. our upstream DDoS protection and community platforms) to prevent abuse.

Content you run

• Scripts you execute pass through components running on your machine. We do not collect script contents, browsing history, credentials, tokens, or keystrokes. The Software does not upload your scripts to us.

Website data

• The public website is static. It does not set advertising or analytics cookies, and we do not fingerprint visitors. Infrastructure providers may process transient request logs for security.

2. How We Use Data

• deliver and activate your License, prevent and detect fraud, abuse, and license sharing;
• provide support, diagnose issues, and improve the Services;
• communicate Service updates, renewals, and security notices;
• enforce our Terms of Service and community rules;
• comply with legal obligations.

GDPR legal bases: contract performance (delivering your License), legitimate interests (security, anti-fraud, improvement), and legal obligation where applicable. We do not rely on consent for these purposes; where consent is used (e.g. optional features), you may withdraw it at any time.

3. What We Do Not Collect

• We do not collect Roblox credentials, authentication tokens, or platform cookies.
• We do not record keystrokes, screen data, or microphone/camera data.
• We do not sell your personal information. We do not share it with advertising networks or data brokers.

4. Local Processing

The executor’s bridge binds exclusively to 127.0.0.1 (loopback) on your own machine. Script requests you initiate are sent from your machine directly to the destinations you specify. We do not proxy, inspect, log, or store those requests.

5. Sharing Processors

We share only with categories of processors needed to operate the Services:

• Payment processors — to take payment and manage subscriptions;
• Communication platforms — e.g. Discord, for support and product delivery;
• Infrastructure and protection providers — hosting, DDoS and abuse mitigation;
• Legal/law enforcement — where required by valid legal process.

6. International Transfers

Data may be processed in countries other than your own. Where GDPR applies, transfers rely on the European Commission’s Standard Contractual Clauses or an adequacy decision as supplemented by appropriate technical and organizational safeguards.

7. Retention

• Account and license records: retained while your License is active and for up to 3 years afterwards for fraud prevention and dispute defense.
• Crash traces: shared ones are retained only as long as needed to resolve the issue, then deleted.
• Session tokens: never persisted by us; generated and cleared on your machine.
• Backups age out on normal rotation cycles.

8. Your Rights

Depending on your jurisdiction you may have the right to: access your data; obtain a copy in a portable format; correct inaccuracies; delete your data; restrict or object to processing; and, where processing is consent-based, withdraw consent. Under the GDPR/UK GDPR you may also lodge a complaint with a supervisory authority. Under state laws such as the CCPA/CPRA you may exercise rights to know, delete, correct, and opt out of sale/sharing (we do not sell; you have no need to opt out).

To exercise any right, contact us on Discord. We may verify your identity against your license record before fulfilling a request, and respond within one month (or sooner where the law requires).

9. Children

The Services are not directed to children under 13 (or under 16 where the applicable law sets a higher age), and we do not knowingly collect their personal information. If you believe a child has provided us personal information, contact us so we can delete it.

10. Security

We apply defense-in-depth appropriate to the sensitivity of the data we hold: least-privilege access for operators, encryption in transit for data we do transmit, and audited distribution of engine builds. No system is perfectly secure; if you find a vulnerability in our Services, report it through our support channels rather than exploiting it.

11. Do Not Track

Because the website sets no tracking cookies and carries no third-party analytics, “Do Not Track” signals have no effect on how the website operates.

12. Changes to This Policy

We may update this Policy as the Services evolve. The “Last updated” date above reflects the current version. If a change is material, we will communicate it through our official channels in advance.

13. Contact

Privacy questions, requests, or concerns: Discord.