Privacy Policy

1. Introduction

Welcome to OnlyFarms ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website at onlyfarms.rs or use our services (regardless of where you visit it from) and tell you about your privacy rights and how the law protects you.

2. The Data We Collect

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

• Identity Data includes Discord username, display name, or similar identifiers used for account authentication and support purposes.
• Contact Data includes email address for critical notifications, account recovery, and service updates.
• Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our services.
• Usage Data includes information about how you use our website and services, including features accessed, time spent, and interaction patterns.
• Account Data includes configuration settings, bot farm configurations, account profiles, and operational data necessary to provide our services. We do not store your RuneScape passwords—only encrypted session tokens.

3. How We Use Your Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• Where we need to perform the contract we are about to enter into or have entered into with you (e.g., providing bot farm management services).
• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests (e.g., improving our services, fraud prevention).
• Where we need to comply with a legal obligation.
• Where you have given consent for specific uses of your data.

4. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. All data is encrypted using AES-256 encryption both in transit (via TLS/SSL) and at rest. We limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and are subject to a duty of confidentiality.

We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

5. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. When determining the appropriate retention period, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure, and applicable legal requirements.

6. Your Legal Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data:

• Right to access - You can request copies of your personal data.
• Right to rectification - You can request correction of inaccurate or incomplete data.
• Right to erasure - You can request deletion of your personal data under certain conditions.
• Right to restrict processing - You can request restriction of processing of your personal data.
• Right to data portability - You can request transfer of your data to another service.
• Right to object - You can object to processing of your personal data.

To exercise any of these rights, please contact us via our Discord server.

7. Third-Party Services

Our services may integrate with third-party services (such as Discord for authentication and support). These third parties have their own privacy policies, and we encourage you to review them. We are not responsible for the privacy practices of third-party services.

8. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

9. Changes to This Privacy Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. You are advised to review this policy periodically for any changes.

10. Contact Details

If you have any questions about this privacy policy or our privacy practices, please contact us via our Discord server at https://discord.gg/WkWeSUUJzk.