Privacy Policy

Effective December 1, 2026 · Last updated October 20, 2026

This Privacy Policy for An Old Man in the Village, Inc. (doing business as SWG Restoration) ("SWG Restoration," "we," "us," or "our"), a Delaware nonprofit corporation recognized as tax-exempt under Section 501(c)(3) of the Internal Revenue Code, describes how and why we collect, store, use, and share ("process") your information when you use our services ("Services"), such as when you:

• Visit our website at https://swgr.org, or any website of ours that links to this Privacy Policy
• Play SWG Restoration, use our launcher, or download and use any of our other services
• Make a donation or other payment to us
• Participate in our events, contests, or community activities, or otherwise engage with us
• Connect to or use our official Discord Server (discord.gg/swgr), not including any other Discord Servers. Discord is a third-party platform, and your use of it is also subject to Discord's Privacy Policy.

Questions or concerns? Reading this Privacy Policy will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you have questions or concerns, please submit the form at https://swgr.org/privacy-inquiry or email privacy@swgr.org.

1. What information do we collect?

1.1 Personal information you provide to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our Services, participate in activities on the Services, make a donation or payment, or otherwise contact us. The personal information we collect depends on the context of your interactions with us and the Services, the choices you make, and the features you use. It may include:

• usernames
• passwords (stored only in hashed form, as described in "How do we keep your information safe?" below)
• email addresses
• contact preferences
• contact or authentication data
• legal names
• confirmation that you are at least 18 years old (we do not store your date of birth)

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to it.

1.2 Donations and payments

Donations and other payments are processed by our payment processors, Stripe and PayPal, which collect and store your payment information. We never receive your full payment card number, bank account credentials, or other payment details. We store only a record that your transaction was completed. Your payment information is subject to the terms and privacy policy of the processor you use (Stripe; PayPal).

1.3 Information we receive from third parties

We may receive information about you from the following sources:

• Discord. If you link your Discord account to your SWG Restoration account (for example, through Discord's OAuth sign-in), or you use our official Discord Server, we receive your Discord user ID, username, display name, email address, avatar, server roles, and the content you post on our Discord Server. Discord's handling of your information is governed by Discord's Privacy Policy.
• Other sign-in providers. If we offer, and you choose to use, another third-party sign-in or account-linking service, we receive the information you authorize that provider to share with us.
• Payment processors. Stripe and PayPal confirm to us whether your transaction was completed.
• Our identity verification provider. Stripe shares the outcome of an identity verification with us, as described in "Identity verification" below.
• Other Star Wars Galaxies game service operators. To prevent abuse, we may receive information from other operators about accounts associated with cheating, fraud, harassment, or other malicious behavior, such as usernames, email addresses, IP addresses, and a description of the conduct (see "Mitigating Abuse" below).
• Player reports. Players may submit reports to us that include your communications or conduct on our Services or on other services.

1.4 Identity verification

In Short: In some cases we may require you to verify your identity through our provider, Stripe. We never view your identity documents or images, and we never ask for your Social Security number.

We may require you to verify your identity to confirm account ownership, to prevent one person from operating multiple accounts in violation of our Terms of Service, or to resolve an account dispute or enforcement matter. If your account is subject to identity verification, we will provide you with separate guidelines that explain the process and apply to your verification in addition to this Privacy Policy.

Identity verification is performed by Stripe, Inc. through its Stripe Identity service. During verification, Stripe asks you to photograph a government-issued photo ID (such as a driver's license or passport) and may ask you to take a selfie. Stripe checks that the document is authentic and compares the photo on your ID to your selfie. To make that comparison, Stripe creates biometric identifiers of your face. Stripe will ask for your consent to this processing before you begin, and you may decline.

What we receive and keep:

• We receive: whether your verification succeeded or failed, the reason if it failed, and the first name, last name, and date of birth that Stripe verified from your document.
• We keep: only the verification outcome and a unique identifier, which we create by applying a one-way cryptographic hash to your verified first name, last name, and date of birth. We use this identifier solely to confirm that two accounts do not belong to the same person. We do not store your verified name or date of birth.
• We do not receive or keep: biometric data of any kind. We do not access or view your identity document or selfie images.
• We never ask for: your Social Security number or any other government identification number.

Stripe stores the images and verification record on our behalf. We instruct Stripe to delete (redact) the verification record held for us seven (7) days after you submit it or when your verification request has been processed, whichever comes first. Separately, Stripe acts as an independent controller of some verification data, including for its own fraud prevention and security purposes, and keeps that data under its own retention schedule and Privacy Policy. Information about Stripe's handling of identity data, including how to ask Stripe to delete it, is available here and by contacting privacy@stripe.com.

If you do not wish to complete identity verification through Stripe, contact us at privacy@swgr.org to ask about alternatives. We may be unable to restore or grant access to an account that cannot be verified.

1.5 Information automatically collected

In Short: Some information, such as your Internet Protocol (IP) address and browser and device characteristics, is collected automatically when you use our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This may include your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, approximate location, information about how and when you use our Services, and other technical information. We use this information primarily to maintain the security and operation of our Services and for internal analytics and reporting. We also collect information through cookies and similar technologies, as described in our Cookies Policy.

The information we collect includes:

• Log and Usage Data. Service-related, diagnostic, usage, and performance information our servers automatically collect and record in log files when you access or use our Services. This may include your IP address, device information, browser type and settings, and information about your activity in the Services (such as date and time stamps, pages and files viewed, searches, features used, and other actions you take), as well as device event information such as system activity, error reports (sometimes called "crash dumps"), and hardware settings.
• Device Data. Information about the computer, phone, tablet, or other device you use to access the Services, which may include your IP address (or proxy server), device and application identification numbers, browser type, hardware model, Internet service provider or mobile carrier, operating system, and system configuration.
• Location Data. Approximate location (such as country, region, or city) inferred from your IP address. We do not collect precise geolocation, such as GPS data.

1.6 Security and Fair Gaming

We may monitor and use all information you provide to us or that is automatically collected, individually or in the aggregate, to protect and secure our Services, assets, network, and operations; to detect, investigate, and prevent activities that may violate our policies or be fraudulent or illegal; or when necessary to protect our property or rights or the safety of our staff, volunteers, members, or other individuals. To provide a fair gaming experience to all players, we use anti-fraud, anti-cheat, and anti-toxicity technologies to prevent cheating and bad behavior in our game.

1.7 Listening and Sentiment Analysis

We use social listening tools and moderation technologies, including bots, to monitor publicly available conversations and content on online platforms, including on our Discord Server and other social media channels. This helps us uphold our community standards through moderation, respond to community concerns, and understand player sentiment to improve our games and Services.

2. How do we process your information?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, process donations and payments, keep our Services secure and fair, and comply with law. We may also process your information for other purposes with your consent.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

• To facilitate account creation and authentication and otherwise manage user accounts, so you can create and log in to your account and keep it in working order.
• To deliver and facilitate delivery of the Services you request.
• To process donations and payments, including issuing receipts and handling refunds and disputes.
• To verify identity, as described in "Identity verification" above.
• To respond to inquiries and offer support.
• To send administrative information, such as details about our Services and changes to our terms and policies.
• To enable user-to-user communications when you choose to use features that allow communication with other users.
• To request feedback and contact you about your use of our Services.
• To protect our Services, including fraud, cheating, and multiple-account monitoring and prevention.
• To identify usage trends so we can understand how our Services are used and improve them.
• To determine the effectiveness of our outreach and promotional campaigns.
• To save or protect an individual's vital interests, such as to prevent harm.

2.1 Communications on our Services

Communications made using our Services, such as in-game chat or messages on our Discord Server, should not be considered private. We may monitor and record your communications (including chat text) to prevent cheating and fraud and to enforce our Community Standards and Terms of Service. We may retain records of these communications for up to six months. If moderators take action on a communication, that communication and any adjoining messages needed to provide context may be retained indefinitely and may be shared publicly. This is our notice of such monitoring, and you may choose not to use these communication features. You should not have an expectation of privacy in any user-generated content or communications transmitted through our Services, including chat text, and you acknowledge that we will monitor and record such communications as described in this Privacy Policy.

2.2 Voice and audio

We do not record or retain voice chat on our Services, and we do not create voiceprints or use speaker-identification technology. The only exception is official events we host: we may record the audio or video of an event, but we will always give notice in advance, and the platform hosting the event will display when a recording is in progress. If you do not wish to be recorded at an official event, you may choose not to speak or transmit audio. Because voice chat and other communications may be heard or viewed by other users, you should avoid revealing personal information in them.

2.3 Third-party services

Our Services do not include, and we do not routinely monitor or record communications on, third-party services such as Discord Servers owned or operated by others, except as described above under "Listening and Sentiment Analysis." We may retain records of communications on other services if players report them to us and they are relevant to our community or legal interests.

2.4 Automated decision-making

We do not engage in profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. Our anti-cheat and moderation tools may automatically detect and flag activity, but every permanent ban is reviewed by a member of our team.

3. What legal bases do we rely on to process your information?

In Short: We process your personal information only when we have a valid legal basis to do so under applicable law, such as your consent, to perform our agreement with you, to comply with law, to protect vital interests, or to pursue our legitimate interests.

If you are located in the European Economic Area (EEA), the United Kingdom (UK), or Switzerland, data protection law requires us to explain the legal bases we rely on. We rely on:

• Performance of a Contract — processing necessary to provide the Services under our Terms of Service, or to take steps at your request before entering into that agreement.
• Legitimate Interests — processing reasonably necessary for our legitimate interests, where those interests are not outweighed by your interests and fundamental rights and freedoms. Our legitimate interests include keeping the Services secure and fair, preventing fraud, cheating, and multiple-account abuse, enforcing our Community Standards and Terms of Service, understanding and improving how the Services are used, and communicating with our community.
• Consent — processing based on your permission for a specific purpose. You may withdraw your consent at any time (see "Changing or Withdrawing Your Consent" below). Withdrawal does not affect processing that occurred before you withdrew.
• Legal Obligations — processing necessary to comply with the law, such as tax and accounting record-keeping, responding to valid legal process, or establishing, exercising, or defending legal claims.
• Vital Interests — processing necessary to protect your vital interests or those of another person, such as in situations involving potential threats to anyone's safety.

The table below shows the legal basis for each purpose.

Where we rely on Legitimate Interests, you have the right to object to the processing (see "Your Rights in the EEA, UK, and Switzerland" below).

4. When and with whom do we share your personal information?

In Short: We will never sell your information. We may share information in the specific situations described in this section and with the following categories of third parties.

Vendors, Consultants, and Other Third-Party Service Providers. We may share your data with third-party vendors, service providers, contractors, or agents ("third parties") who perform services for us or on our behalf and need access to such information to do that work. We have contracts in place with our third parties designed to help safeguard your personal information: they may use it only as we instruct, may not share it with any organization other than us, must protect the data they hold on our behalf, and must retain it only for the period we instruct. Some providers, such as payment processors and our identity verification provider, also process certain information as independent controllers under their own privacy policies, as described in this Privacy Policy. The categories of third parties we may share personal information with are:

• Cloud Computing Services
• Data Analytics Services
• Outreach and Communications Tools
• Website Hosting Service Providers
• User Account Registration and Authentication Services
• Communication and Collaboration Tools
• Payment Processors (Stripe and PayPal)
• Identity Verification Services (Stripe)

De-identified Game Data. We share some game data, such as character names, in-game statistics, and in-game activity, with our community of developers who create applications and websites that benefit our player community. This data does not include account information, such as usernames, email addresses, or IP addresses, and is not shared in a form that third parties can reasonably use to identify your account or you. We may also share aggregated or de-identified information with third parties to operate or improve our Services or to provide benefits to our members.

Law Enforcement and Litigation. We may disclose your information if we are required to do so by law. We may also disclose your information to law enforcement or in civil litigation in connection with the enforcement of our rights or your legal obligations.

Mitigating Abuse. We may share account information with, and receive it from, other operators of Star Wars Galaxies game services to track and mitigate the behavior of malicious actors who attempt to violate our terms or harm our services. We do not receive payment or any other consideration for this sharing. We share information only with operators who agree to protect it in the same manner as described in this Privacy Policy.

Sweepstakes, Contests, and Promotions. When we run contests, sweepstakes, or promotions, we collect certain personal information from participants to enter them into the event and to deliver any prizes won. We do not merge this information with general account information or use it beyond the purposes of the applicable contest, sweepstakes, or promotion.

No Sale of Personal Information. We will never sell your personal information, and we do not use it for commercial or for-profit purposes.

5. Do we use cookies and other tracking technologies?

In Short: Yes. We and our service providers use cookies and similar technologies, which you can manage through our cookie banner.

We and our service providers, such as analytics providers, use cookies and similar tracking technologies (like web beacons and pixels) to access or store information. Non-essential cookies are used only with your consent, which you can give, refuse, or change at any time through the cookie banner on our website. Specific information about how we use these technologies and how you can refuse certain cookies is set out in our Cookies Policy at https://swgr.org/help/cookies/.

6. Is your information transferred internationally?

In Short: Yes. We are based in the United States, and your information is processed in the United States and in other countries where our service providers operate.

Our servers are located in the United States. If you access our Services from outside the United States, the information you provide to us is sent to and processed by us in the United States. It may also be processed by the third parties with whom we share it (see "When and with whom do we share your personal information?" above) in the United States and other countries. These countries may not have data protection laws as comprehensive as those in your country.

If you are located in the EEA, the UK, or Switzerland, then where we transfer your personal information to service providers in countries that have not received an adequacy decision, we rely on appropriate safeguards. These include the European Commission's Standard Contractual Clauses (with the UK Addendum or Swiss amendments, as applicable) or the provider's certification under the EU-U.S. Data Privacy Framework and its UK and Swiss extensions. You may request a copy of the relevant safeguards by contacting us as described in "How can you contact us about this notice?" below.

7. How long do we keep your information?

In Short: Except where this Privacy Policy sets a specific period, we may keep your information indefinitely, unless you ask us to delete it.

Some categories of information have specific retention periods:

• Identity verification records held by Stripe on our behalf are deleted seven (7) days after submission or when your verification request is processed, whichever comes first (see "Identity verification" above). We keep only the verification outcome and the unique identifier described in that section.
• Communications on our Services are kept for up to six months, unless moderators take action on them (see "Communications on our Services" above).
• Contest, sweepstakes, and promotion information is kept only for the purposes of the applicable event.

We may keep all other personal information for as long as your account exists and afterward, without a fixed end date, unless you ask us to delete it (see "Requesting We Delete Your Data or Account" below). In deciding what to keep, we consider our need to maintain account and game history, enforce our Terms of Service and prevent banned players from returning, prevent fraud and multiple-account abuse, meet tax and accounting obligations, establish or defend legal claims, and preserve the history of our community and game.

When we delete personal information, information stored in backup archives may persist until those archives are overwritten. Until then, we isolate it from further processing.

8. How do we keep your information safe?

In Short: We protect your personal information through organizational and technical security measures, and we will notify you of a breach as required by law.

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the personal information we process. We never store your password in readable form: passwords are stored only as one-way cryptographic hashes, which means our staff cannot see them. However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise that hackers, cybercriminals, or other unauthorized third parties will never be able to defeat our security and improperly access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.

Data breach response. If we learn of a security incident that compromises your personal information, we will promptly investigate and take steps to contain it. We will notify affected users, regulators, and others as required by applicable law, without unreasonable delay. Where required, our notice will describe what happened, what information was involved, what we are doing in response, and what you can do to protect yourself.

9. Do we collect information from minors?

In Short: No. Our Services are only for people 18 and older, and we do not knowingly collect information from anyone under 18.

You must be at least 18 years old to use our Services, and we do not permit anyone under 18 to use them under any circumstances, including with a parent's or guardian's consent. We ask you to confirm that you are at least 18 when you register; we do not store your date of birth. We do not knowingly collect personal information from, or market to, anyone under 18. By using the Services, you represent that you are at least 18 years old.

If we learn that we have collected personal information from someone under 18, we will deactivate the account and take reasonable measures to promptly delete that information from our records. If you become aware of any information we may have collected from someone under 18, please contact us at privacy@swgr.org or through the form at https://swgr.org/privacy-inquiry.

10. What are your privacy rights?

In Short: Wherever you live, you may (1) request a copy of the information we maintain about you; (2) request changes to it; (3) change or withdraw your consent; and (4) request that we delete your account and information. Residents of some places have additional rights, described below.

We extend the rights in this section to all users, regardless of where they live. Some laws give you additional rights. Where a law that applies to us gives you broader rights than those described here, we will honor them. You can make any request through the form at https://swgr.org/privacy-inquiry or by emailing privacy@swgr.org. We may need to verify your identity before acting on a request, and we will respond within thirty days.

10.1 Requesting a Copy of Your Data

You can request a copy of the data we maintain about you by submitting the form at https://swgr.org/privacy-inquiry and checking the "Data Subject Access Request" box, or by emailing privacy@swgr.org. Because collecting all responsive data takes significant effort and our resources are limited, we will provide a copy up to two times per calendar year, or more often if required by applicable law.

10.2 Requesting Changes to Your Data

To request a change to any data we maintain about you, submit the form at https://swgr.org/privacy-inquiry or email privacy@swgr.org. We will either make the requested change or tell you how to make it yourself. Most changes to account data can be made at https://swgr.org/account/account-details under the "Settings" pages in the navigation bar. Depending on the type of data and our reasons for keeping it, we may be unable to make some requested changes; if so, we will explain why.

10.3 Changing or Withdrawing Your Consent

Cookies. To change or withdraw your consent to cookies, click the "Cookies" button in the footer of most pages on our website or use our cookie banner. For details, see our Cookies Policy at https://swgr.org/help/cookies/. You can also set your browser to remove or reject cookies, which may affect certain features of our Services.

Emails. You can unsubscribe from our news and update emails at any time by clicking the unsubscribe link in any such email, or by unchecking "Receive news and update emails" at https://swgr.org/account/preferences, where you can also adjust more specific notification settings. We may still send you messages necessary to administer your account, respond to your requests, or for other non-promotional purposes.

Other consent. To change or withdraw consent for any other type of processing, submit the form at https://swgr.org/privacy-inquiry or email privacy@swgr.org with the details of your request.

Some information is collected automatically when you use our website, launcher, or game client, as described in this Privacy Policy. To stop all such collection, you must stop using the Services.

10.4 Requesting We Delete Your Data or Account

You may request that we delete your account by submitting the form at https://swgr.org/privacy-inquiry while logged in and checking the "I am requesting the deletion of my account" box. If you cannot log in, email privacy@swgr.org from the address associated with your account or with enough information for us to verify that the account is yours. We will respond to and act on deletion requests within thirty days, and we may ask for more information to process your request. If your account has previously been disciplined for violating our policies, we will keep the records necessary to prevent new accounts from bypassing our disciplinary standards.

Some personal information may be exempt from deletion under applicable law. We may keep personal information as necessary to: (a) protect our Services, systems, and users from fraudulent or malicious activity; (b) address technical issues that impair existing functionality; (c) allow us or others to exercise free speech or other legal rights; (d) comply with law enforcement requests made through lawful process; (e) conduct scientific or historical research; or (f) meet our legal obligations or serve internal purposes reasonably related to your relationship with us.

10.5 Your Right to Nondiscrimination

We will not deny you the Services or provide a different level of quality because you choose to exercise your privacy rights.

10.6 Appeals

If you disagree with our response to any request, you may submit another request noting that you are appealing a previous communication or decision. We will respond within thirty days after a secondary review by one or more leaders of our organization.

11. Your rights in the EEA, UK, and Switzerland

If you are located in the EEA, the UK, or Switzerland, you also have the right, subject to applicable law, to:

• Access your personal information and receive information about how we process it
• Rectify inaccurate or incomplete personal information
• Erase your personal information
• Restrict our processing of your personal information
• Data portability, meaning to receive personal information you provided to us in a structured, commonly used, machine-readable format, or have it sent to another controller
• Object to processing based on our legitimate interests, and to object at any time to processing for direct marketing
• Withdraw consent at any time, where we rely on consent

We will not charge a fee for these requests unless they are manifestly unfounded or excessive, as permitted by law. You also have the right to lodge a complaint with your local data protection authority. In the EEA, you can find yours here. In the UK, it is the Information Commissioner's Office. In Switzerland, it is the Federal Data Protection and Information Commissioner. We would appreciate the chance to address your concerns first, so please consider contacting us at privacy@swgr.org.

12. Controls for Do-Not-Track features

Some web browsers and operating systems include a Do-Not-Track ("DNT") setting that signals a preference not to have data about your online activities monitored and collected. We do not currently respond to DNT signals. Instead, you can control our use of non-essential cookies and similar technologies at any time through the cookie banner on our website or the "Cookies" button in the footer of most pages.

13. Do we make updates to this notice?

In Short: Yes. We will update this Privacy Policy as necessary to reflect our practices and stay compliant with relevant laws.

We may update this Privacy Policy from time to time. Each version shows a "Last updated" date and an "Effective date" at the top, and takes effect on its effective date. If we make material changes, we will notify you before they take effect, either by prominently posting a notice of the changes or by sending you a notification directly. We encourage you to review this Privacy Policy frequently to stay informed about how we protect your information.

14. How can you contact us about this notice?

If you have questions or comments about this Privacy Policy, you may contact our privacy team by submitting the form at https://swgr.org/privacy-inquiry, by emailing privacy@swgr.org, or by post at:

An Old Man in the Village, Inc.
16192 Coastal Highway
Lewes, DE 19958
United States