1. Who we are
DodoReaper ("DodoReaper", "we", "us", "our") operates dodoreaper.com, its sub-domains, the DodoReaper Discord bot, the DodoReaper HQ desktop app, and the DodoReaper game-server plugins (together, the "Service"). DodoReaper is an independent, fan-made platform for ARK: Survival Evolved and ARK: Survival Ascended and is not affiliated with, endorsed by, or sponsored by Studio Wildcard, Wildcard Properties LLC, Snail Games USA, Inc., or their respective affiliates. For the personal information described in this policy, DodoReaper is the data controller.
2. Information we collect
- Account data: username, email address, password (stored only as a one-way hash), avatar, and any profile details you choose to add.
- Sign-in providers: if you sign in with Discord, Google, or Steam, we receive the account identifier, display name, avatar, and (where the provider shares it) email address from that provider. We never receive your password for those services.
- Content you submit: posts, comments, guides, screenshots, reviews, votes, server listings, tribe pages, support tickets, Community Q&A questions and answers, and uploaded images and videos. Uploaded photos are re-encoded and videos are repackaged on our own servers before they are stored, which removes embedded file metadata such as camera location data.
- Server owners and the HQ app: server names, addresses and ports, configuration you provide, and, for the HQ desktop app, a device identifier, device name, the IP address of the connected machine, the team members you invite and their roles, the commands sent through HQ with their results, and diagnostic logs used to keep HQ working.
- Game-server and player data: public server information (name, map, player count, status) obtained from game-server queries, and in-game player names seen on listed servers. Servers that install a DodoReaper plugin also send us player identifiers (such as Steam or Epic Online Services IDs), in-game names, online status, and playtime for that server's statistics and leaderboards.
- Purchases and trials: when you start a free trial, buy a plan, or buy a server-store item, payment is processed by our payment providers (see section 4). We receive the order details, payment and trial status, the billing email, and customer and subscription identifiers, and we use the billing email to send the trial-ending reminder. We do not receive or store your full card number.
- AI assistant: the questions you send to the AI assistant and its answers, stored as a conversation linked to your account or, if you are signed out, to an anonymous browser session identifier.
- Technical data: IP address, browser and device type, language, referring page, pages visited, and security and audit logs, used for security, abuse prevention, rate-limiting, and analytics.
- Cookies and local storage: sign-in session tokens, preferences such as theme and language, and identifiers set by our analytics and advertising partners (see section 5).
3. How we use your information, and our legal bases
- To provide the Service (performance of our contract with you): accounts, profiles, server listings, votes, stores, tickets, the HQ app, plugins, and the AI assistant.
- To keep the Service safe (our legitimate interests): detecting fraud, vote manipulation, spam, and abuse, and securing accounts.
- To understand and improve the Service (our legitimate interests, or your consent where the law requires it): usage analytics and aggregated statistics.
- To show advertising (your consent where the law requires it): ads served by Google AdSense.
- To communicate with you (performance of contract): verification, password-reset, ticket, and purchase emails.
- To meet legal obligations: tax and accounting records, responses to lawful requests, and handling copyright notices.
4. Service providers we use
We share personal information with providers that process it on our behalf, only as needed to run the Service:
- Hosting and network: our own dedicated servers, and Cloudflare (content delivery, security, and DNS).
- File storage: Cloudflare R2 for uploaded images, videos, and files.
- Email: Resend, for transactional emails.
- Payments: Stripe for DodoReaper plans; Stripe or Tip4Serv for server stores run by server owners.
- AI processing: Google (Gemini), Groq, Cerebras, SambaNova, and OpenRouter, which receive the text of AI-assistant questions to generate answers.
- Analytics and advertising: Google Analytics, Microsoft Clarity, Cloudflare Web Analytics, and Google AdSense (section 5).
- Sign-in: Discord, Google, and Steam, when you choose to sign in with them.
5. Cookies, analytics, and advertising
- Strictly necessary cookies keep you signed in and protect the Service. They cannot be switched off without breaking sign-in.
- Analytics: Google Analytics and Cloudflare Web Analytics measure traffic. Microsoft Clarity records how pages are used (clicks, scrolling, and session replays) so we can fix usability problems; we do not intentionally send passwords or payment data to it.
- Advertising: third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites. Google's advertising cookies enable it and its partners to serve ads based on those visits. You can opt out of personalized advertising at Google Ads Settings or www.aboutads.info. Learn more in how Google uses data from partner sites.
- Visitors in the European Economic Area, the United Kingdom, and Switzerland are asked for consent through Google's consent message before advertising cookies are used. You can also block or delete cookies in your browser settings; some features may stop working.
6. Sharing and disclosure
We do not sell your personal information for money. Besides the providers in section 4, we disclose information only:
- Publicly, at your choice: profiles, posts, comments, guides, reviews, server listings, and leaderboard entries are visible to other users and to search engines.
- To server owners: when you vote for, join, or buy from a server, its owner can see the related activity (for example, your in-game name, vote, or order).
- Hosted community websites: a website hosted on DodoReaper by a server owner is run by that owner, who decides what it collects from its visitors and buyers (for example store orders and in-game names) and is responsible for that data. DodoReaper hosts the website and processes that data on the owner's behalf.
- For legal reasons: when required by law or a valid legal request, or to protect the rights, property, or safety of DodoReaper, our users, or others.
- In a business transfer: if the Service is merged, acquired, or sold, subject to this policy.
7. International transfers
Our servers and several of our providers are located outside your country, including in the European Union and the United States. Where the law requires it, these transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses offered by those providers.
8. Your rights and choices
Depending on where you live, you may have the right to:
- Access the personal information we hold about you, and receive a copy of it in a portable format.
- Correct inaccurate information (most of it can be edited directly in your profile).
- Delete your account and personal information, yourself from Settings in your dashboard (Delete account), or by asking us.
- Object to or restrict certain processing, and withdraw consent at any time without affecting earlier processing.
- Opt out of personalized advertising (section 5).
- Lodge a complaint with your local data-protection authority.
To make a request, open a support ticket while signed in, or use the contact page. We may need to verify your identity, and we respond within the time the law requires (usually 30 days). We will not discriminate against you for exercising your rights.
9. Data retention
We keep account data while your account is active. When you delete your account from your dashboard, it is removed immediately; after a verified deletion request made to us, we delete or anonymize your personal information within 30 days. In both cases we may keep information where we must, to meet legal, tax, or accounting obligations, to resolve disputes, or to prevent fraud and abuse: support tickets, store orders, and reports are kept with your name removed. Backups are rotated within 90 days.
10. Security
We protect information with encryption in transit (HTTPS), hashed passwords, encrypted storage of sensitive secrets, access controls, and monitoring. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
11. Children
The Service is not directed at children under 13, and we do not knowingly collect personal information from them. Where your country sets a higher age for consenting to online services (up to 16 in parts of the EU), you need a parent's or guardian's permission below that age. If you believe a child has provided us with personal information, open a ticket or contact us and we will delete it.
12. Changes to this policy
We may update this policy from time to time. We will change the "Last updated" date above and announce material changes on the site at least 14 days before they take effect.
13. Contact
Questions about this policy or your data? Open a support ticket or reach us via the contact page.