Privacy Policy

1. Introduction

Redwood State Staff Portal ("we", "us", "our") operates this website to manage our Emergency Response: Liberty County (ER:LC) community. This Privacy Policy explains how we collect, use, and protect your personal information when you use our portal and verification services.

2. Information We Collect

We collect the following information when you use our services:

• Discord Account Data: Your Discord user ID, username, and avatar (obtained via Discord OAuth2 with your consent)
• Roblox Account Data: Your Roblox user ID, username, and display name (obtained via Roblox OAuth2 with your consent)
• Portal Activity: Moderation actions, shift logs, leave requests, and other portal interactions performed by staff members
• Session Data: Authentication tokens stored in secure cookies to keep you logged in

3. How We Use Your Information

• To verify your identity and link your Discord and Roblox accounts
• To manage staff roles, ranks, and permissions within our community
• To assign Discord roles automatically upon verification
• To display live ER:LC server player data on the staff dashboard
• To maintain moderation records and staff activity logs
• To process leave of absence requests

4. Data Storage & Security

Your data is stored in a secure PostgreSQL database. Authentication tokens are encrypted using industry-standard JWT encryption. We use HTTPS for all data transmission. Session cookies are set as HttpOnly and Secure to prevent unauthorised access.

5. Third-Party Services

We integrate with the following third-party services:

• Discord: For authentication (OAuth2) and automatic role assignment via our Discord bot
• Roblox: For account verification (OAuth2) and player identity
• ER:LC API: For fetching live server player data
• Vercel: For hosting and deployment

Each of these services has their own privacy policies which we encourage you to review.

6. Data Sharing

We do not sell, trade, or otherwise transfer your personal information to outside parties. Your data is only accessible to authorised staff members with appropriate permissions within the portal. Discord and Roblox account information is only used for verification and role management purposes.

7. Data Retention

Your data is retained for as long as you are a member of our community. If you wish to have your data removed, you may contact a server administrator. Staff activity logs and moderation records may be retained for community safety purposes even after your account is removed.

8. Your Rights

• You can request a copy of the personal data we hold about you
• You can request correction of inaccurate data
• You can request deletion of your data (subject to section 7)
• You can revoke Discord and Roblox OAuth access at any time through those platforms' settings

9. Children's Privacy

Our services are intended for users who meet the minimum age requirements set by Discord (13+) and Roblox (13+ for certain features). We do not knowingly collect information from users under the age of 13.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated date. Continued use of the portal after changes constitutes acceptance of the updated policy.

11. Contact

If you have any questions or concerns about this Privacy Policy or your personal data, please contact a server administrator through our Discord server.