Privacy Policy

Last updated: 30 July 2026

1. Introduction & Scope

Draconis Infrastructure, LLC ("Draconis", "we", "us", or "our") is a digital infrastructure company. This Privacy Policy explains how we handle personal information collected through this corporate website (the "Site"). It applies to visitors who browse the Site, contact us through our forms, or otherwise interact with us in connection with our corporate and business-to-business activities.

This corporate Site does not sell products or service packages directly. Customer-facing sales are operated by our specialised sub-brands through their own separate websites, which may publish their own privacy notices. Where Draconis Infrastructure, LLC acts as the central payment processor on behalf of its brands (for example, for business-to-business billing), this Policy describes how we handle the limited personal information involved in that role. For questions about a specific brand's products, please refer to that brand's own privacy notice.

Android games: our Google Play games are covered by the separate Mobile Games Privacy Notice. It identifies the five advertising-supported games, the five paid games without advertising, the exact data categories processed by Google Mobile Ads, and the privacy choices available to players.

For the purposes of the EU and UK General Data Protection Regulation ("GDPR"), Draconis Infrastructure, LLC is the data controller in respect of personal information processed through this Site. For the purposes of the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"), Draconis Infrastructure, LLC is the business responsible for the personal information described below.

2. Information We Collect

We aim to collect only the information we genuinely need. The categories of personal information we process are:

2.1 Information you provide through our contact form

When you submit our contact form, we collect the information you choose to provide, which typically includes:

• Name — so we can address you appropriately;
• Email address — so we can respond to your enquiry;
• Company / organisation name — to understand the business context of your enquiry;
• Subject — the topic of your enquiry, to help us route it correctly;
• Message content — the details, questions, or request you send us.

You are not required to provide any special categories of data (such as health, biometric, or political information), and we ask that you do not include such information in your message.

2.2 Usage and analytics data

When you visit the Site, we may automatically collect technical and usage information, such as your approximate location (derived from IP address), browser type and version, device type, operating system, referring URLs, the pages you view, and the dates and times of your visits. This information helps us understand how the Site is used and how to improve it.

2.3 Cookies and similar technologies

We and our service providers use cookies and similar technologies to operate the Site, to gather the analytics data described above and — if you opt in — to display and measure advertising supplied by Google AdSense. Analytics and advertising cookies are set only after you consent to the matching category. See the "Cookies & Analytics" section below and our Cookie Policy for the full list, and for how to change or withdraw your choice at any time.

3. How We Use Your Information & Legal Bases (GDPR)

We use the personal information described above for the following purposes. Where GDPR applies, we rely on the corresponding legal bases:

• To respond to your enquiries and communicate with you — for example, replying to a message submitted through our contact form. Legal basis: our legitimate interests in responding to and managing communications, and/or taking steps at your request prior to entering into a contract.
• To operate, maintain, and secure the Site — including protecting against fraud, abuse, and security incidents. Legal basis: our legitimate interests in running a secure and reliable website, and compliance with our legal obligations where applicable.
• To understand and improve how the Site is used — through analytics. Legal basis: your consent, where required for non-essential cookies and analytics, and otherwise our legitimate interests in improving our services.
• To display advertising on the Site — we show ads supplied by Google AdSense, and advertising revenue helps fund the Site. Legal basis: your consent, which we obtain through our cookie banner before any advertising cookie is set and which you can withdraw at any time.
• To process central payments and business-to-business billing on behalf of our brands — where you transact with us in that capacity. Legal basis: performance of a contract, compliance with legal obligations (including accounting and tax requirements), and our legitimate interests in administering payments.
• To comply with the law and enforce our terms — including responding to lawful requests from authorities. Legal basis: compliance with a legal obligation and our legitimate interests in protecting our rights.

Where we rely on legitimate interests, we balance those interests against your rights and freedoms. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

4. Cookies & Analytics

The Site uses essential cookies that are necessary for it to function. It also uses non-essential cookies in three categories — analytics, functional and advertising — each of which is set only after you opt in to it. We use analytics (Google Analytics) to understand aggregate trends, and we do not build individual marketing profiles ourselves. The Site does, however, display advertising supplied by Google AdSense: if you opt in to advertising cookies, Google and its advertising partners may use cookies and similar technologies to select, deliver, measure and personalise ads, which can include personalising them using information Google already holds about you.

You can change or withdraw any of these choices at any time using the permanent "Manage cookies" control shown on every page, or through your browser settings. Our consent manager applies Google Consent Mode v2 and denies analytics storage, advertising storage, advertising user data and ad personalisation until you opt in; it also treats a Global Privacy Control (GPC) signal from your browser as an opt-out of advertising. For a full description of the cookies we use, their purposes, durations, and how to manage them, please see our Cookie Policy.

5. Third Parties & Processors

We do not sell your personal information for money. We share it with service providers ("processors") who help us operate the Site and our business, only to the extent necessary for them to perform their services on our behalf and under appropriate contractual safeguards. One provider is different: if you opt in to advertising cookies, Google acts as an independent controller for advertising delivered through Google AdSense, and that activity may count as a "sale" or as "sharing" under some U.S. state privacy laws (see the CCPA/CPRA section below). Our key providers include:

• Google Analytics (Google LLC / Google Ireland Limited) — website analytics and usage measurement.
• Google Translate (Google LLC / Google Ireland Limited) — optional automated translation of Site content for convenience. Translations are provided "as is" and the English version remains authoritative.
• Google AdSense (Google LLC / Google Ireland Limited) — supplies the advertising displayed on the Site. Loaded only if you opt in to advertising cookies. Google and its advertising partners may then use cookies and device information to select, deliver, measure and personalise ads, acting as an independent controller under Google's own terms. See policies.google.com/technologies/ads.
• Stripe (Stripe, Inc. / Stripe Payments Europe, Ltd.) — secure processing of payments and business-to-business billing where Draconis processes payments centrally on behalf of its brands. Stripe handles cardholder data as an independent processor/controller in accordance with its own terms and privacy policy.
• Web hosting and infrastructure providers — to host the Site, store contact-form submissions, and deliver content securely and reliably.

We may also disclose personal information where required to comply with applicable law, regulation, legal process, or an enforceable governmental request, or to protect the rights, property, or safety of Draconis, our users, or others. In the event of a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that transaction, subject to this Policy or a successor notice.

6. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. In practice:

• Contact-form submissions are retained for as long as needed to handle your enquiry and any related follow-up, and thereafter for a reasonable period to maintain a record of our communications, after which they are deleted or anonymised.
• Analytics data is retained for the limited periods configured in our analytics tools, typically in aggregated or pseudonymised form.
• Payment and billing records are retained for the periods required by applicable tax, accounting, and anti-fraud laws.

When personal information is no longer required, we securely delete or anonymise it.

7. Data Security

We implement appropriate technical and organisational measures designed to protect personal information against unauthorised access, disclosure, alteration, and destruction. These measures include encryption of data in transit (HTTPS/TLS), access controls, the use of reputable service providers, and the principle of collecting only the data we need. No method of transmission over the internet or method of electronic storage is completely secure, however, and we cannot guarantee absolute security. If we become aware of a personal data breach that is likely to result in a risk to your rights, we will notify the relevant supervisory authority and affected individuals where required by law.

8. International Transfers

Draconis Infrastructure, LLC is established in the United States, and some of our service providers may process personal information in the United States or other countries outside your own. Where we transfer personal information from the European Economic Area, the United Kingdom, or Switzerland to a country that has not been deemed to provide an adequate level of protection, we put in place appropriate safeguards, such as the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum where applicable), together with supplementary measures as needed. You may request more information about these safeguards using the contact details below.

9. Your Rights Under GDPR

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights in respect of your personal information, subject to applicable conditions and exemptions:

• Access — to obtain confirmation of whether we process your personal information and a copy of it;
• Rectification — to have inaccurate or incomplete personal information corrected;
• Erasure — to request deletion of your personal information ("right to be forgotten") in certain circumstances;
• Restriction — to request that we limit the processing of your personal information in certain circumstances;
• Portability — to receive certain personal information in a structured, commonly used, machine-readable format and, where technically feasible, to have it transmitted to another controller;
• Objection — to object to processing based on our legitimate interests, including any direct marketing;
• Withdrawal of consent — to withdraw your consent at any time where we rely on consent, without affecting the lawfulness of prior processing;
• Complaint — to lodge a complaint with your local data protection supervisory authority.

To exercise any of these rights, please contact us using the details in the "Contact" section below. We will respond within the timeframes required by applicable law. We do not charge a fee unless your request is manifestly unfounded or excessive, and we may need to verify your identity before acting on a request.

10. Your Rights Under CCPA/CPRA

If you are a California resident, you have the following rights under the CCPA/CPRA, subject to applicable conditions and exemptions:

• Right to know — to request disclosure of the categories and specific pieces of personal information we have collected, the sources, the purposes for collection, and the categories of third parties with whom we share it;
• Right to delete — to request deletion of personal information we have collected from you;
• Right to correct — to request correction of inaccurate personal information;
• Right to opt out of the sale or sharing of personal information;
• Right to non-discrimination — to not receive discriminatory treatment for exercising your privacy rights.

We do not sell your personal information for money. However, this Site displays advertising supplied by Google AdSense. If you opt in to advertising cookies, Google and its advertising partners may use cookies and similar technologies to personalise and measure ads, and that activity may constitute a "sale" of personal information or "sharing" for cross-context behavioural advertising as those terms are defined under the CCPA/CPRA. We therefore give you a direct way to opt out.

How to opt out of the sale or sharing of your personal information: use the permanent "Manage cookies" control shown on every page of this Site and switch the Advertising category off (or choose "Reject non-essential"). That control is our “Do Not Sell or Share My Personal Information” mechanism: advertising cookies are off by default and are placed only if you switch that category on. We also honour the Global Privacy Control (GPC) signal, so if your browser or extension sends GPC we treat it as an opt-out of advertising unless you subsequently opt in yourself. Your choice is stored in the draconis_consent cookie on your browser; if you clear cookies or use another browser or device, please set your preference again.

To exercise any of your other rights, contact us using the details below. You may use an authorised agent to make a request on your behalf, and we may take reasonable steps to verify your identity and the agent's authority before responding. We will not discriminate against you for exercising your privacy rights.

11. YouTube API Services

Draconis Infrastructure operates its own channels on YouTube and uses YouTube API Services to publish and manage the videos on those channels. By using our services you agree to be bound by the YouTube Terms of Service. Google's handling of data is described in the Google Privacy Policy.

11.1 What we access

Our software is an internal publishing tool. It is authorised by a single company account that we own, and it acts only on YouTube channels that belong to Draconis Infrastructure. It uploads our own videos, sets their titles, descriptions, localisations, captions, thumbnails, playlists and publication schedule, and reads the performance statistics of our own channels. It does not access, request or receive the account data, viewing history, subscriptions or personal information of any other YouTube user.

11.2 What we store

We store only what is needed to publish and to avoid publishing the same video twice: the identifiers of our own uploaded videos, captions and playlist entries, their publication times, and aggregate performance figures for our own channels. This data is held on servers we control, is not sold, and is not shared with any third party. No personal data of YouTube users is stored, because none is collected.

11.3 Revoking access and deletion

Because only our own company account authorises this tool, access can be revoked at any time through the Google security settings page at https://myaccount.google.com/permissions. Revoking access immediately ends the tool's ability to reach YouTube. Stored authorisation credentials and channel data are deleted within 30 days of revocation, or sooner on request. Requests relating to data deletion may be sent to info@draconisinfrastructure.com or made through our Data Deletion page.

12. Children's Privacy

This Site is intended for businesses and adults and is not directed to children. We do not knowingly collect personal information from children under the age of 16. If you believe a child has provided us with personal information, please contact us and we will take reasonable steps to delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make changes, we will revise the "Last updated" date above and, where the changes are material, take additional steps to notify you as required by law. We encourage you to review this Policy periodically.

14. Contact & Data Protection Contact

If you have any questions about this Privacy Policy, or wish to exercise your rights, please contact us:

• Email: info@draconisinfrastructure.com (general enquiries, privacy requests and support)
• Entity: Draconis Infrastructure, LLC
• Registered office: 131 Continental Dr, Suite 305, Newark, DE 19713, United States
• Company registration: Delaware, USA — File No. 7800123
• Phone: +1 (302) 488-1540

If you are in the EEA or UK and are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.

This document is provided in English, which is the authoritative version; automated translations are for convenience only.