Privacy Policy

What we collect

When you verify via TSK Bot using Roblox OAuth 2.0, we receive and store the following, all of which are public information already visible on your Roblox profile:

• Your Roblox user id (the sub claim)
• Your Roblox username and display name
• Your Discord user id (not username, not email)
• A timestamp of when the link was made

We request the openid and profile scopes only. We do NOT receive or store your Roblox email, friends list, group memberships, messages, transactions, inventory, or any other personal data beyond the public profile fields above.

How we use it

The linked record is used exclusively to:

• Display your Roblox rank and role in the TSK Discord server
• Track XP within The Sorcerer Kingdom faction pools
• Apply rank changes in managed Roblox groups when authorized by server staff

The data is never sold, shared with third parties, used for advertising, or used outside the operation of the TSK Discord server and its affiliated Roblox groups.

Data retention

Your linked record is kept until you run /unverify in Discord, or request deletion from a TSK server administrator. Upon unverifying, your user row is deleted from the bot's database. Audit log entries (which record that a verification happened, but not your current linked state) are retained for security review.

Where it lives

All data is stored in a local SQLite database on the bot host. The bot does not forward your data to any external service beyond the Roblox API calls required to fulfill rank and XP operations you or staff explicitly request.

Your rights

You can remove your verification at any time with /unverify in the TSK Discord server. For complete data deletion including audit log entries, contact a TSK server administrator.