Privacy Policy

Last Updated: April 4, 2026

Your privacy is important to us. This Privacy Policy explains what information we collect, how we use it, where we store it, and how we protect it. By using our Discord Bot, Website, or API services, you agree to the practices described in this policy.

1. Information We Collect

We collect the following types of information to provide and improve our services:

User Data

• Discord Account: User ID, Username, Global Name, Avatar, and OAuth2 tokens (for web login).
• Roblox Account: User ID, Username, Display Name, Avatar, ID Verification status, and Group Memberships.
• Linked Accounts: The association between your Discord and Roblox accounts, including a history of link and unlink actions.

Operational Data

When you interact with our services (e.g. logging in via the web dashboard), we may collect technical data necessary for the operation, security, and integrity of the Service. This may include:

• IP addresses.
• Browser and device information.
• Persistent identifiers (cookies) used to maintain your session.
• Roblox inventory data (e.g. badge ownership) when required for badge-based role assignment.

Guild (Server) Data

• Guild IDs and configuration settings.
• Role mappings (Roblox Group Ranks and Badge IDs to Discord Roles).
• Nickname formatting preferences.
• Log channel configurations.

API & Service Data

• API Keys (including owner ID, tier, and usage stats).
• Voucher usage history.

2. How We Store Your Data

Your data is stored in a secure MongoDB database. This allows for persistent settings, reliable role synchronization, and service features.

Cookies: We use signed and encrypted cookies for session management when you log in to our web dashboard. We also use persistent tracking cookies to maintain service integrity.

Data Retention: Certain data is automatically deleted after a retention period. For example, account linking history is retained for a limited time and then permanently removed. Other operational data may be capped or rotated to prevent unnecessary accumulation.

3. How We Use Your Information

We use the collected information to:

• Verify your identity and link your Discord account to your Roblox account.
• Automatically update your Discord nickname and roles based on your Roblox group data and badge ownership.
• Provide access to the web dashboard for managing server settings.
• Manage API access and enforce rate limits based on your API key tier.
• Maintain the security and integrity of the Service.
• Troubleshoot technical issues and improve service performance.

4. Data Sharing

We do not sell your personal data to third parties. However, to function correctly, our service interacts with:

• Discord API: To fetch your profile, manage roles, and update nicknames.
• Roblox API: To verify your account ownership, fetch group rank information, check badge ownership, and confirm ID verification status.
• Third-party services: We may use external services to process operational data (e.g. IP address validation) for the purpose of maintaining service integrity. These services only receive the minimum data necessary.

5. Roblox Inventory Access

If a Discord server has configured badge-based roles, we will check your Roblox inventory for specific badge ownership using the Roblox Open Cloud API. This check only retrieves badge data relevant to the configured roles. If your inventory is set to private, badge-based roles cannot be assigned and you will be notified.

6. Data Security

We implement industry-standard security measures to protect your data. This includes using encrypted connections (HTTPS), secure database storage, and signed cookies for session authentication. API Keys should be kept secret and are the responsibility of the user.

7. Your Rights

You have control over your data:

• Unlinking: You can unlink your accounts at any time via the web dashboard ("Roblox Accounts" section).
• Guild Data Deletion: Guild Owners can permanently delete all data associated with their Discord server via the "Guild Settings" page on the web dashboard.
• Data Deletion: If you wish to have all your data permanently deleted from our database, please contact support.
• Access: You can view the data we hold about you via the web dashboard. The /lookup command is a tool available to authorized users (based on API Key tier) to query linked user information for verification and administration purposes.

8. Contact Us

If you have any questions about this Privacy Policy, please contact us at xingfutang0669@gmail.com.

9. Updates to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last Updated" date at the top of this page.