Privacy
Privacy Notice
About This Server
This Privacy Notice explains how Daedric Online (“the Server”, “we”, “our”, or “us”) collects, uses, stores and protects information when you access or participate in our Skyrim roleplay server, launcher, Discord community, website and related services.
By connecting to the Server or using related services, you acknowledge that your information may be processed as described in this Privacy Notice.
Data Controller
Daedric Online is operated by its administrator, who acts as the data controller responsible for the processing described in this notice.
For any question about this notice, or to exercise your rights, contact the data controller at [email protected] or through our Discord.
Information We Collect
When you use the launcher, connect to the Server, or interact with our community, we may collect:
- Discord user ID, username and display name
- Roles you hold in our Discord community, including supporter status and any staff or in-game roles
- Server account and character identifiers
- Launcher installation and update identifiers, and the install markers described below
- IP address, and the type of network it belongs to (for example home, mobile, data centre or VPN)
- Device identifier hashes (HWID hashes), including the wider device report described below
- A general description of your computer (processor, graphics card and display models, amount of memory, Windows build and installation day, time zone, language setting and keyboard layouts), and whether it appears to be a virtual machine or a remote-display session
- Ban case, evidence score, staff review and probation records, where they concern you
- Character and gameplay data, including character names, appearance, location, inventory, progression, property and time played
- Connection, authentication and build-verification logs
- Moderation records, including warnings, reports, kicks, bans and appeals
- Information you voluntarily provide through support tickets, applications, bug reports, appeals or other communications
We do not collect your name, postal address, date of birth, telephone number or payment details, and we do not operate a payment system. We do not receive your Discord password: authentication is performed by Discord, and we receive only the account identifiers listed above.
Device Identifier Hashes
To prevent banned users from returning under new accounts, the launcher reads a small number of hardware and installation identifiers from your device. These values are converted into one-way hashes on your own machine before transmission. The Server receives and stores only the resulting hashes, and we do not receive the underlying values.
Each time you press Play, the launcher also sends a wider device report, read without administrator rights. As one-way hashes, it contains: the manufacturer, product and serial codes of up to 12 monitors Windows has recorded as connected to the computer; the date and time Windows was installed; the hardware identifiers of the graphics cards; the permanent hardware address of up to four built-in network adapters; the Windows drive's volume serial number; and the serial numbers of up to eight memory modules. In readable form, it contains the general description of your computer listed above, and fixed labels that say whether the computer appears to be a virtual machine or a remote-display session. These hashes are made with a key that ships inside the launcher, so we treat them as personal data even though they are not the raw values.
None of this refuses, holds or restricts anyone by itself. The Server compares it with the devices of banned accounts as supporting evidence. The device report is stored separately from the older device identifiers and is deleted 180 days after an account last sent it, except while the account is banned.
Install Markers
When you sign in, link Discord or set up your account, the Server may give the
launcher an install marker: a random number, signed by the Server, that identifies
the installation. It contains no hardware or personal information. The launcher
keeps it as a small visible file named install.id (for our test server,
a file named after that server) in a folder named DaedricOnline in up to
six places: the launcher's own AppData folder, %LOCALAPPDATA%,
%APPDATA%, Documents\My Games\Skyrim Special Edition,
%PROGRAMDATA% (shared by every Windows user on the computer), and
Data\SKSE\Plugins inside your Skyrim folder. The launcher sends the
markers it finds when you press Play, link Discord or set up your account.
The files stay on your computer after you uninstall the launcher, and you may delete them yourself. The Server keeps up to eight install identifiers per account, for 180 days after they were last seen, except while the account is banned.
Network Type
The Server looks up what kind of network your IP address belongs to (for example a home connection, a mobile network, a data centre, a VPN service or the Tor network) in public lists that we download and keep on the Server. Your address is not sent to any third party for this. The network type is only a small, capped part of the evidence described below; it never refuses, holds or restricts anyone on its own.
Ban Cases, Evidence Scores and Probation
When an account is banned, the Server opens a ban case for the person behind it. A ban case links the accounts, Discord accounts, Steam accounts, install identifiers and device identifier hashes seen with that person's banned accounts, and records later attempts to return (when, through which part of sign-in, and which kinds of identifier matched). New identifiers are added to a case only from sign-ins the Server has verified. A ban therefore applies to the person and to every account and device linked to them.
For newer accounts, the Server calculates how closely the account matches a banned person, using the identifiers above, the network type, the age of the linked Discord account and how soon after a ban the account appeared. Close matches are shown to staff for review, without IP addresses or identifier hashes. An account that matches closely may be placed on probation: it can still play, but cannot trade with other players, sell from stalls, give or drop items for others, loot other players after a fight, rob, use storage shared with other players, or hold an office or court role, until staff clear it or it has played long enough after a review without new evidence. Staff may hold an account that matches very closely until they have reviewed it. A shared network alone never leads to probation or a hold.
Your Ban Page and Ban Appeals
Every ban has a ban code, shown in the message the game displays when a banned account tries to log in. Our ban page (daedriconline.com/appeal) shows the holder of a code that ban: whether it is active, its term, its reason, the changes made to it since (for example made permanent or shortened, with the reason as it then read), and the appeals made about it. We keep that record of changes for this purpose; it does not name the staff who made them. Treat your ban code like a password: anyone who has it can see that ban.
You can instead sign in with Discord on the ban page. This is optional. Discord asks you to let us identify your account. Discord then gives us your basic public profile (your account ID, username, display name and avatar); we use your account ID to find the bans on that account and your display name to show you who you are signed in as, and we do not keep the rest. We do not receive your email address, your servers or your messages. The access Discord grants is revoked as soon as your account has been identified, and the page keeps nothing about the sign-in after you close it. If you then send an appeal, the account ID the sign-in confirmed is kept with that appeal (see below). Signing in takes place on Discord's website and is also covered by Discord's own privacy policy.
When you send an appeal, we keep with it what you wrote, the Discord name or ID and the character name you gave, your ban code if you gave one, the Discord account ID a sign-in confirmed if you were signed in, and a one-way hash of your network address (never the address itself), which we use to limit spam and to keep each person to one open appeal at a time. When the ban was confirmed (by its ban code or your sign-in), we also keep with the appeal a copy of that ban as it stood (its term, its current reason and the dates it changed), so the ban page can still show it after the ban ends. Only the current reason for a ban is shown on the ban page; earlier wordings are not. Appeals are shown to our staff in our staff Discord channel and on our staff dashboard. Staff decisions, the reason staff give for them, and any message staff write to you are shown on your ban page.
Discord Posting Record
This record is off unless we turn it on, and we will say so in our Discord when we do. While it is on, our Discord bot records that your Discord account has posted in our Discord server since a set date, and the time of your latest post. Posting in our Discord requires a verified phone number, so the record helps us tell an established Discord account from a throwaway one. We record that you posted, never what you posted, in which channel, or your phone number (Discord never gives us your number). The game server receives only whether the Discord accounts of current members have posted. Posts in a dedicated verification channel, if we set one up, are deleted after they are recorded. The record is kept for up to 400 days after your last post.
Voice Pass
When you sign in, the Server gives the launcher a voice pass that is valid for 12 hours and works only for proximity voice. The launcher keeps it in its AppData folder and uses it to connect to the voice server instead of your installation identifier.
Voice and Text Chat
In-game proximity voice chat is relayed between players in real time and is not recorded or stored. Your microphone is transmitted only while you hold the push-to-talk key.
Ordinary in-game text chat is delivered to nearby players and is not retained. Certain messages are recorded because they are directed to staff or written permanently into the game world, including administrative broadcasts, requests for staff assistance, support tickets, and in-game letters and noticeboard posts.
Why We Process Information
We collect and process information to:
- Operate and maintain the Server
- Authenticate players and restore their characters
- Provide gameplay and community services
- Enforce Server rules
- Investigate reports and moderation incidents
- Detect and prevent cheating, exploits and malicious activity
- Prevent ban evasion and alternate-account abuse
- Maintain server security, integrity and stability
- Respond to support requests and appeals
- Comply with legal obligations where applicable
Legal Basis for Processing (EU/EEA/UK Users)
If you are located in the European Union (EU), European Economic Area (EEA) or United Kingdom (UK), we process the information needed to create your account and provide access to the Server on the basis of performance of a contract.
We process the remaining information under our legitimate interests in:
- Operating and administering the Server
- Protecting the community from abuse, harassment, cheating and malicious activity
- Maintaining fair gameplay
- Enforcing Server rules
- Detecting and preventing ban evasion
- Maintaining network and system security
Where required, we may also process information to comply with legal obligations.
Who Has Access to Information
Access is restricted to the administrator and to moderation and technical staff who require it to perform moderation, security, operational or support functions. Staff are expected to access information only when necessary to perform their duties, and staff actions are recorded in our moderation logs.
Where IP addresses are displayed to staff through our moderation tools, they are shown in a partially masked form.
Information Sharing
We do not sell, rent, trade or otherwise monetise personal information.
Information may be shared only:
- With service providers involved in hosting or operating the Server
- When required by law, legal process or lawful requests from authorities
- To protect the security, integrity, rights or safety of the Server, its staff or its users
- In connection with investigating fraud, abuse, cheating or other violations of Server rules
Service Providers
We rely on third-party providers to operate and protect our services. These providers process information only as needed to perform their functions on our behalf, and handle it in accordance with their own privacy practices.
Our website is hosted by Netlify and delivered through Cloudflare, a content delivery network and security provider. When you access the website, these providers process connection data, including your IP address, to route traffic, deliver content and protect the site against attacks. The website itself does not use cookies, analytics or tracking scripts.
We rely on Discord for authentication and community communication; your use of Discord is governed by Discord’s own privacy policy. Required game modifications are distributed by Nexus Mods and installed with Vortex, under Nexus Mods’ own terms and privacy policy. The launcher never asks for your Nexus Mods credentials and sends no requests to Nexus Mods itself.
Supporter Benefits
Supporting the Server financially is optional and is handled entirely by Patreon. We have no integration with Patreon and never contact them. If you choose to connect your Patreon and Discord accounts, Patreon assigns you a supporter role in our Discord community, and the Server reads that role in order to grant the associated in-game benefits.
This means we can see, and do store, that your Discord account holds a supporter role and which tier of role it is. We do not receive your Patreon account, your name, your email address, your pledge amount or any payment or card details, and no payment information passes through any system we operate.
Data Retention
We retain information only for as long as reasonably necessary for operational, moderation, security and legal purposes. The retention period for each type of information depends on the purpose it serves; the following indicative durations apply:
- Account and character data: retained for as long as the account exists.
- IP addresses: a limited number of recent addresses is retained per account, and addresses older than approximately two months are no longer used to associate accounts.
- Connection, authentication and activity logs: retained for a limited operational period and overwritten in the ordinary course.
- Ban records and the identifiers attached to them (IP address, device identifier hash): retained for as long as the ban or sanction is in force, and may be kept afterwards to prevent ban evasion.
- Ban cases: kept while any ban in the case is in force; the identifiers and the record of attempts are removed 180 days after the last ban in the case is lifted. Daily backup copies are kept for 14 days.
- Device reports and install identifiers: 180 days after an account last sent them, and for as long as the account is banned.
- Evidence scores: 90 days. Staff review records and ended probations: 180 days.
- Discord posting record (only while it is turned on): up to 400 days after your last post in our Discord.
- Ban codes and the record of changes to a ban: for as long as the ban is in force, and 120 days after it ends.
- Ban appeals: 90 days after staff decide them, or 180 days after they were sent if they are not decided. Each appeal is also posted in our staff Discord channel, where it is kept for as long as it is needed to handle that appeal and any later appeal or ban concerning the same person.
- Discord sign-in on the ban page: not kept, apart from the account ID kept with an appeal you send while signed in.
Retention may continue after an account is suspended, banned or otherwise ceases using the Server where necessary to:
- Prevent ban evasion
- Investigate recurring abuse
- Protect the Server and community
- Maintain historical moderation records
International Data Transfers
The Server infrastructure is located in the United States. Our administrators, moderators and service providers may be located in other countries. As a result, information may be processed and stored outside your country of residence, including in countries that may not provide the same level of data protection as your jurisdiction.
Where our service providers transfer personal information outside the EU/EEA/UK, they do so under the safeguards described in their own privacy documentation.
Security
We implement reasonable technical and organisational measures designed to protect information from unauthorised access, disclosure, alteration, misuse or destruction. These include minimising what is collected, hashing device identifiers before they leave your machine, masking IP addresses in staff-facing tools, and restricting access to authorised staff.
However, no online service, network or storage system can guarantee absolute security.
Your Rights
Depending on your location and applicable law, you may have rights regarding your personal information, including the right to:
- Request access to information about you
- Request correction of inaccurate information
- Request deletion of personal information
- Object to certain processing activities
- Request restriction of processing
- Request a copy of certain information in a portable format
- Lodge a complaint with a supervisory authority
We will respond to verified requests within the timeframe required by applicable law. These rights are not absolute: where the law permits, we may retain or continue to process certain information after assessing your request, where doing so is necessary and our interest in retaining it overrides the request. This may apply, for example, to security and the prevention of fraud, cheating and abuse; to the enforcement of bans and the prevention of ban evasion; to the establishment, exercise or defence of legal claims; and to compliance with our legal obligations.
In such cases we will delete or restrict the information we no longer need, retain only what is necessary, and explain the reason for any partial refusal. You also have the right to lodge a complaint with your local data protection authority.
Changes to This Privacy Notice
We may update or modify this Privacy Notice at any time. Changes are effective upon posting the revised notice on our website, and the date above will be updated. We encourage you to review this notice periodically.
Contact Us
If you have questions or concerns about this Privacy Notice or our data practices, you can contact the data controller through the following channels: