Privacy Policy

This Privacy Policy applies to Melon Sandbox services, including accounts, user-generated content, complaint handling, moderation, legal compliance, and related platform features.

• Account data, such as username, email address, authentication data, settings, and support communications.
• User content and metadata, such as uploads, descriptions, comments, timestamps, identifiers, and moderation status.
• Technical data, such as IP address, device information, browser type, logs, cookies, and security events.
• Complaint and legal data, such as notices, counter-notices, appeals, statements, contact details, and evidence submitted through forms.
• Payment or transaction data if paid features are offered, handled directly or through payment processors.

We process personal data to:

• Provide, operate, secure, and improve Melon Sandbox.
• Create and manage accounts, uploads, reports, appeals, and support requests.
• Detect, prevent, and respond to abuse, fraud, spam, security incidents, and illegal content.
• Comply with copyright, trademark, privacy, DSA, GDPR, and other legal obligations.
• Communicate with users about service, safety, legal, and policy matters.

Where GDPR applies, our legal bases may include performance of a contract, compliance with legal obligations, legitimate interests in operating and protecting the platform, consent where required, and vital or public-interest grounds where applicable to urgent safety or legal matters.

We may share data with service providers, hosting vendors, security vendors, payment processors, professional advisers, authorities, courts, complainants, uploaders, and other parties where needed to operate the service, process legal notices, enforce policies, protect rights and safety, or comply with law.

If GDPR applies, you may have rights to transparent information, access, rectification, erasure, restriction, and related information about processing. Requests should identify the account or data at issue and provide enough information for us to verify and process the request. We respond in a concise, transparent, intelligible, and easily accessible form as required by GDPR Article 12.

We process notice, action, complaint, appeal, moderation, and statement-of-reasons data to comply with the Digital Services Act, maintain transparency records, prevent misuse, and report aggregate moderation metrics. DSA-related records may include reporter details, affected content identifiers, decision reasons, timestamps, review status, and whether automated tools materially assisted a decision.

We retain personal data only for as long as needed for the purposes described in this policy, including account operation, legal compliance, dispute handling, abuse prevention, and security. We use reasonable technical and organizational measures to protect data, but no online service can guarantee absolute security.

Privacy requests and legal data inquiries may be sent through the complaint form or by email to [email protected].