Privacy Policy — Dunharrow

Dunharrow (“we”, “us”, “our”) is committed to protecting the privacy of our customers and website visitors. This Privacy Policy explains what personal information we collect, how we use it, and your rights under the Privacy Act 1988 (Cth) (“Privacy Act”) and the Australian Privacy Principles (“APPs”).

By using the Dunharrow platform at dunharrow.com.au, you consent to the collection and use of your information as described in this policy.

1. Information We Collect

Account information

When you sign in via Google OAuth, we receive your name and email address from Google. We store these to identify your account, associate your servers with you, and send you transactional emails related to your service.

Payment information

Payments are processed exclusively by Stripe. Dunharrow never receives, transmits, or stores your card number, CVV, or other sensitive payment credentials. We store only the Stripe Customer ID associated with your account so we can manage your subscription and invoices.

Server and usage information

We store the server name, game type, plan, and configuration you choose when setting up a game server. We also log provisioning events and status changes (e.g., server going live, suspension, cancellation) to support your account.

Referral and rewards information

If you participate in our referral programme, we store your referral code and record point transactions associated with your account.

Technical information

Our platform and third-party analytics tools (Vercel Analytics, Vercel Speed Insights) may collect anonymised usage data such as page views, browser type, and device type. This data is not linked to your personal identity and is used only to improve the platform.

2. How We Use Your Information

To create and manage your account and game servers
To process payments and manage your subscription via Stripe
To send transactional emails about your servers and account (e.g., server live, payment failed, cancellation confirmation) via our email delivery provider, Resend
To operate the referral and rewards programme
To respond to support enquiries sent to contact@dunharrow.com.au
To monitor node capacity and ensure service reliability
To comply with our legal obligations under Australian law

We do not use your personal information for advertising or marketing profiling, and we do not sell or share your information with third parties for their marketing purposes.

3. Data Storage and Security

Your account and server data is stored in a PostgreSQL database hosted by Neon (US region). Game server configuration data is held in the Pelican game panel running on our Perth-based VPS infrastructure.

We implement reasonable technical and organisational measures to protect your information, including encrypted database connections, HTTPS for all web traffic, and access controls on our infrastructure. However, no system is completely secure and we cannot guarantee absolute security.

We retain your account data for as long as your account is active. If you request account deletion, we will remove your personal information within 30 days, subject to any legal retention obligations.

4. Third-Party Service Providers

We share your information only with third-party providers necessary to operate the Service:

Stripe — payment processing and subscription management. Stripe is PCI DSS compliant. Their privacy policy is available at stripe.com/au/privacy.
Resend — transactional email delivery. Your email address and the content of transactional messages are processed by Resend to deliver emails on our behalf. Their privacy policy is at resend.com/legal/privacy-policy.
Google — OAuth identity provider. When you sign in with Google, you share your name and email address with us under Google's terms. Google's privacy policy is at policies.google.com/privacy.
Vercel — application hosting, analytics, and speed insights. Anonymised usage data is processed by Vercel. Their privacy policy is at vercel.com/legal/privacy-policy.
Cloudflare — DNS management for server subdomains. Cloudflare processes domain lookups for your server's address.

We do not sell, rent, or otherwise disclose your personal information to any other third party.

5. Your Rights Under the Privacy Act 1988

Under the Australian Privacy Principles, you have the right to:

Access — request a copy of the personal information we hold about you
Correction — ask us to correct inaccurate or out-of-date information
Complaint — lodge a complaint with us if you believe we have not complied with the Privacy Act; and if you are not satisfied with our response, you may escalate the complaint to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au

To exercise any of these rights, contact us at contact@dunharrow.com.au. We will respond within 30 days.

6. Cookies

We use session cookies to keep you signed in. We do not use third-party advertising cookies or tracking pixels. Analytics data collected by Vercel is anonymised and does not use persistent cross-site tracking cookies.

7. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you by email at least 14 days before material changes take effect. The date at the top of this page indicates when the policy was last revised.

9. Contact Us

For privacy enquiries, access requests, or complaints, contact us at:

Dunharrow
Perth, Western Australia
contact@dunharrow.com.au