Privacy Policy

1Who we are and what this covers, section 1

1.1 Controller. Sir Dominic Scott ("we", "us") is the controller of the personal data described here. We are a sole proprietor based in Glasgow, Scotland, and the United Kingdom's data protection law applies to us, including the UK GDPR and the Data Protection Act 2018.

1.2 What this covers. This policy covers The Vault+ Liberated website at thevault.locker (and at pop.thevault.locker while that address is in service), its torrent tracker and personal torrent files, and the part of our Discord bot that runs the Liberated rules and role in The Haus of Sir (together, "the Site").

1.3 What it does not cover. Discord's own handling of your data is covered by Discord's privacy policy. Your account on The Vault+, and anything held about you as a former member, is covered by The Vault+ Privacy Policy. Your torrent app, and anyone you exchange data with in a torrent swarm, are outside our control.

2What we collect, section 2

2.1 From Discord, when you log in. Your Discord user ID and your Discord display name (or username if you have no display name). The login asks Discord for the "identify" and "email" permissions. Discord then also gives us the email address on your Discord account, if Discord has verified it. It does not give us your password, your messages, your friends list or your other servers. The access token Discord issues is used once and not kept. Your email address is not stored on the Site: it is passed to our mailing list (see 4.10).

2.2 From Discord, when your access is checked. Our bot reads which roles your account holds in The Haus of Sir, and whether you are in the server. This happens on page loads and downloads. The latest answer is saved and trusted for up to a minute. When you claim the Liberated role, the bot also works out how old your Discord account is from your Discord ID.

2.3 From The Vault+, when you arrive from it. If you move across from The Vault+ while logged in there, The Vault+ passes your Discord ID and name to the Site in a one-time link that expires after two minutes, so you do not have to log in again.

2.4 At the three steps before access opens.

• Age. You type your date of birth and tick two boxes. The date is checked once and is not stored. We keep that you passed, when, which version of the step it was, and your country. If the check shows you are under 18, a note is kept in your login session so the step cannot be retried from it.
• Rules. That you ticked every rule, when, the version, your country, and a fingerprint of the exact wording you ticked.
• Terms and Licence. That you agreed, when, the version and your country.

2.5 In Discord. When you use the Liberated channel, the bot records: that you agreed to the rules (time, your Discord ID and name, the rules version and which rules); that you claimed the role; if a claim was refused, and why; and if the role was later removed or you left the server.

2.6 When you download from the Site. For each download: the time, your Discord ID and name, your access type, the file and its size, whether it was a resumed download, your country, and your browser's identification string (the "user agent", which names the browser and operating system).

2.7 Your torrent file. Your personal torrent file contains a private address (a "passkey") linked to your Discord ID and name, with the date it was issued and whether it has been cancelled. When your torrent app checks in, the tracker records against your Discord ID: when it last checked in, how many times it finished, and how many times it was refused, with the last reason. It also counts totals by country and by torrent app, with no names attached.

2.8 IP addresses and the tracker. The tracker needs your IP address to connect you with other people in the swarm and to enforce the one-place rule. It holds IP addresses in memory only while your torrent app is active, and they are not written to disk. Since 22 September 2026, your torrent app's check-ins are not written to the web server's logs either.

2.9 Server logs. Like almost every website, our web server keeps access logs. Each entry records the IP address, date and time, the address requested, the response, and the browser's identification string. Check-ins from torrent apps to the tracker are not logged. Our server's error log also notes downloads by Discord ID, for fault finding.

2.10 Cloudflare. All traffic to the Site passes through Cloudflare, which protects it and speeds it up. Cloudflare tells us which country a request comes from. That country code is what we store at the steps and with downloads, not your IP address.

2.11 If you contact us. Your email address, name and whatever you write to us.

2.12 What we do not collect. Your password, your real name (unless your Discord name is your real name), your date of birth, payment or card details, precise location, contacts, or anything from analytics or advertising tools. The Site uses none.

3Sensitive information, section 3

The Site is an archive of adult, fetish and hypnosis material. The fact that someone uses it, holds the role, or downloads a particular file could reveal information about their sex life or sexual interests, which the law treats as special category data. We treat every record described here as sensitive: we keep it to what the Site needs, restrict who can see it, and never publish it.

We process this information on the basis of your explicit consent, which you give at the last step before the Site opens. We also keep the records of what you agreed to where they are needed to establish, bring or defend legal claims. You can withdraw your consent at any time by emailing us. Because the Site cannot work without these records, withdrawing consent ends your access. It does not affect anything done before you withdrew it.

4Why we use it, and our lawful basis, section 4

4.1 To run the Site and give you access (contract, and your explicit consent for sensitive information). Logging you in, checking your roles, applying the 72 hour window, issuing your torrent file and running the tracker are needed to provide the Site under the Terms you agree to.

4.2 To keep the Site adults-only (legal obligation and legitimate interests). The age step and its records help keep people under 18 away from adult material and show that we did so. Our legitimate interest is protecting children and complying with the law on adult content.

4.3 To show who agreed to what (legitimate interests). The records of the rules, the Terms and the Licence show who agreed to which version and when. Our legitimate interest is being able to prove the Licence and the Terms bind the people who use the Materials, and to enforce them.

4.4 To enforce the rules and protect the Materials (legitimate interests). The download records, torrent records and role checks let us enforce "no sharing" and "one place at a time", spot misuse, stop commercial exploitation, and act under section 11 of the Terms. Our legitimate interest is protecting our copyright and the terms on which the Materials are given away free.

4.5 To keep the Site secure and working (legitimate interests). Server logs, error logs and Cloudflare's processing let us find faults, block attacks and keep the Site available. Our legitimate interest is running a secure service.

4.6 To understand use at a general level (legitimate interests). Totals by country, torrent app and file help us see whether the archive is reaching people and plan capacity. These are counts, and are not used to profile individuals.

4.7 To answer you (legitimate interests). If you contact us, we use what you send to reply.

4.8 Former members. If you were a paying member of The Vault+, the download and torrent records also show that the archive was made available to you under section 8 of the Terms. Our legitimate interest is being able to show that our obligations to you were met.

4.9 Automated decisions. Whether the Site opens for you is decided automatically, from your Discord roles and the three steps. You can ask for a person to review a decision by emailing us.

4.10 To email you (your consent). We add the email address Discord gives us to The Haus of Sir mailing list, with your Discord ID and name, to send you news about the Haus, Sir Dominic Scott's releases and offers. Every email has a one-click unsubscribe link, and you can also ask us to remove you at any time.

We do not sell your data, use it for advertising, or use it to train AI.

5Cookies and storage on your device, section 5

5.1 Strictly necessary. One cookie, called `__Host-lib`, keeps you logged in. It lasts up to seven days, is sent only over HTTPS to this address, and cannot be read by scripts. Because it is strictly necessary for a service you ask for, it does not need your consent.

5.2 On pop.thevault.locker only. While the Site is also offered at pop.thevault.locker, logging in there uses The Vault+ login cookie.

5.3 Cloudflare. Cloudflare may set its own strictly necessary security cookies to tell people from bots. They are covered by Cloudflare's own policy.

5.4 Your ticks. The "I have this" ticks on the download list are saved in your browser's local storage on your own device. They are never sent to us.

5.5 Nothing else. No analytics cookies, no advertising cookies, no tracking pixels and no third-party scripts.

6Who can see it, section 6

6.1 Us. Sir Dominic Scott, and the few people who help run the Site and the Discord server, where they need it for that work. The records are shown on a private dashboard that only allow-listed Discord accounts can open.

6.2 Our service providers. They process data for us to provide their service:

• Hetzner Online: hosts the server, in Helsinki, Finland;
• Cloudflare: network, security and delivery for all traffic to the Site;
• Loops: sends our emails and holds the mailing list.

6.3 Discord. Discord provides the login and holds the roles we check. Discord is responsible for its own processing under its own privacy policy.

6.4 Other people in a torrent swarm. When your torrent app shares data, the other people connected to that torrent can see your IP address and your torrent app. This is how every torrent works, and we cannot prevent it. The tracker only hands out addresses of people whose torrent file is valid.

6.5 Authorities and legal claims. We may share information where the law requires it, with the police or a regulator where needed to prevent or report crime or protect someone's safety, and where needed to establish, bring or defend legal claims, including enforcing the Licence.

6.6 Professional advisers. Our lawyers or accountants, where needed, under a duty of confidence.

6.7 A new operator. If someone takes over running the Site or the archive, the records needed to continue it may pass to them, under this policy.

7International transfers, section 7

The server is in Finland, in the European Economic Area, which the United Kingdom recognises as providing adequate protection. Cloudflare, Discord and Loops are based in the United States and process data there and elsewhere. Where personal data goes to the United States or another country without adequate protection, the transfer relies on the UK's adequacy regulations for the UK Extension to the EU-US Data Privacy Framework where the provider is certified under it, and otherwise on the standard data protection clauses approved for the UK (the International Data Transfer Addendum) in that provider's own terms.

8How long we keep it, section 8

• Login session: the login ends seven days after you log in. The server deletes old session files within about 30 days.
• One-time link from The Vault+: deleted when used. Unused links expire after two minutes and are cleared automatically.
• Saved role answer: replaced each time your roles are checked.
• Records of the three steps, the Discord rules and role claims: for as long as the Site or the torrent is offered, and then for 6 years, as evidence of who agreed to the Licence and the Terms.
• Download records and torrent records: for as long as the Site or the torrent is offered, and then for 6 years, as evidence that the archive was made available and of how it was used.
• Your passkey: until it is cancelled or the torrent stops being offered.
• IP addresses at the tracker: held in memory only, while your torrent app is active.
• Server access and error logs: deleted automatically on a rolling basis, normally within 6 months.
• Mailing list: until you unsubscribe or ask us to remove you. After an unsubscribe, the address is kept marked as unsubscribed so you are never emailed again.
• Emails you send us: as long as needed to deal with them.

Records needed for a dispute, a legal claim or an investigation may be kept until it is resolved.

9Security, section 9

The Site is served only over HTTPS. The login cookie is secure and cannot be read by scripts. Access is checked on the server on every page load and download, and fails closed: if anything cannot be confirmed, access is refused. Links from The Vault+ are signed and single-use. Dates of birth are never stored. Our own records store a country, not an IP address. Records are kept outside the website's public folders, on a server only we administer. No system is completely secure, but we take reasonable steps to protect what we hold, and if a breach is likely to put you at high risk, we will tell you.

10Your rights, section 10

Under UK data protection law you have the right to:

• access the personal data we hold about you and get a copy;
• correct it if it is wrong;
• erase it, where there is no overriding reason to keep it;
• restrict how we use it;
• object to our use of it where we rely on legitimate interests;
• portability: receive the data you gave us in a machine-readable form (our records are kept as structured text and can be provided that way);
• withdraw consent, where we rely on consent, at any time;
• not be subject to a purely automated decision with legal or similarly significant effects, and ask for a person to review one.

To use any of these rights, email hello@sirdominic.scot. Say which Discord account it is about. We may ask you to confirm it is yours, for example by messaging us from that Discord account. We will reply within one month. There is no charge.

Some rights are limited. For example, we may keep the record that you agreed to the Licence, even after an erasure request, where it is needed to establish or defend legal claims. Erasing your records also ends your access, because the Site cannot tell you have passed the steps without them.

11Complaints, section 11

Please contact us first so we can try to put things right. You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office, at ico.org.uk. If you live in the European Economic Area, you can also complain to the data protection authority in your country.

12Under 18s, section 12

The Site is only for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If we learn that we have, we will end that access and delete the records we are not required to keep. If you believe someone under 18 has used the Site, email us.

13Changes to this policy, section 13

We may update this policy when the Site or the law changes. The date at the top shows the current version. If a change significantly affects how your data is used, we will also announce it on the Site or in The Haus of Sir.

14Contact, section 14

Sir Dominic Scott, sole proprietor
Glasgow, Scotland, United Kingdom
Email: hello@sirdominic.scot