Verification Privacy Policy

This policy explains what the Arizona State Roleplay verification service (this website and the Discord bot) collects, why, and what happens to it. For our community and website at large, see the community Privacy Policy.

1. What we collect

• From Discord: your user ID, username, and avatar — provided when you sign in with Discord or start verification.
• From Roblox: your user ID — provided by Roblox after you sign in through Roblox's official OAuth flow (openid scope only). Your public username and display name are then looked up from Roblox's public API.
• Verification records: when the link was made and how (self-verification or by a server administrator).

We never see or store your Roblox or Discord password. Sign-in happens entirely on discord.com and roblox.com. We do not collect email addresses, payment details, or browsing history, and we do not use analytics or advertising trackers.

2. How we use it

• Confirming you own the Roblox account you link.
• Granting the Verified role and setting your server nickname to your Roblox name.
• Community moderation within Arizona State Roleplay.

3. Storage and retention

Verification data is stored in a private database. One-time verification links expire automatically after 30 minutes. Your Discord–Roblox link is kept until you remove it — use /unlink in Discord or the Unlink button on your profile at any time.

4. Sharing

We do not sell, rent, or share your data with third parties. Your sign-ins are processed by Discord Inc. and Roblox Corporation under their respective privacy policies; the service runs on Vercel and MongoDB Atlas infrastructure, which process data on our behalf.

5. Your choices

• Use /unlink in Discord, or the profile page's Unlink button, to delete your verification link at any time.
• Leave the Discord server and open a support ticket to request removal of any remaining data.

6. Cookies

This website uses a small number of essential cookies — strictly required for verification to work. We do not use tracking, analytics, or advertising cookies.

• az_login — keeps you signed in after Discord sign-in so your profile and re-verification work (expires after 30 days).
• az_session — holds your one-time verification session while you link Roblox (expires after 30 minutes).
• az_oauth / az_flow — short-lived security values that protect the sign-in flow against forgery (expire after 10 minutes).

Your light/dark theme choice and your cookie-consent acknowledgement are stored in your browser's local storage and never leave your device. You can clear all of these at any time in your browser settings; signing out via your profile also removes the sign-in cookies.

7. Changes and contact

We may update this policy from time to time; the date above reflects the latest revision. Questions? Open a support ticket at discord.gg/asrp. Arizona State Roleplay is not affiliated with Roblox Corporation or Discord Inc.