Privacy Policy
Effective Date: 7 October 2026
Welcome to Creamá
Creamá operates this service for authorized community members aged 13 and over. This policy explains how we handle your information when you link an account, sign in or use the features available to you.
We do not sell personal information, scrape data for unrelated uses or use your information to train artificial intelligence.
Information We Use
We use your Discord and Roblox account identifiers, usernames, profile information and account connection to provide the service. Roblox shares your identity after you approve its sign-in screen. Creamá never asks for your Roblox password.
When you use staff features, we check your current group permissions. We may also process text, files and service activity provided through authorized community features.
We use this information to carry out requested functions, administer the community, resolve problems and protect accounts and community members. Access is restricted to those authorized for the relevant purpose.
Cookies and Service Providers
Essential cookies keep sign-in and account linking secure and maintain your website session. We do not use advertising cookies, optional tracking or third-party analytics.
Roblox and Discord handle their services under their own policies. Railway provides hosting and PostgreSQL storage. Our current deployment is in the US East region, so information may be processed outside Singapore.
If hosting providers or locations change, we must continue to maintain the protections required for overseas transfers.
Retention and Your Choices
Your account connection remains until you unlink it. Use /unverify in the Creamá Discord server to remove the link yourself. You do not need to contact anyone. Clicking the command copies it and opens the server.
Website sessions expire after 30 days by default. Unused account-link and sign-in requests expire after ten minutes.
Routine service activity records are normally retained for five years for community administration and security. Unlinking does not automatically delete these records.
Other information remains only while its authorized purpose or a legitimate legal or business need continues. We review retention and remove or de-identify information when it is no longer needed.
Your Information and Rights
You can contact us to ask about your information, request access or correction, or withdraw consent where applicable.
Some information may need to remain for a continuing lawful purpose. Legal exceptions may also limit access or removal. We will explain the reason that applies to your request.
Security and Contact
We use access controls and reasonable security measures to protect information. No online service can guarantee complete security, so please keep your credentials and private sign-in links to yourself.
For privacy questions or support, join the Creamá server. You can also contact @yeetysenny, our Main Designer.
Singapore law applies to our data protection responsibilities.