Privacy Policy

Power Legends — Discord bot, web dashboard, and Roblox account verification.

Last updated: 30 July 2026

This policy explains what data the Power Legends service collects, why it is collected, how long it is kept, and how to have it deleted. "We", "us" and "the service" mean the operators of the Power Legends Discord bot and the site at powerlegendsdiscord.org.

Using the bot, signing in to the dashboard, or completing Roblox verification means this policy applies to you.

1. Who we are

Power Legends is a community-run Discord bot and dashboard for a Roblox community. It is not affiliated with, endorsed by, or operated by Discord Inc. or Roblox Corporation.

Data controller contact: [email protected]

You can also open a ticket in the Power Legends Discord server for privacy requests.

2. What we collect

2.1 Roblox account verification

When you press "Verify with Roblox", you are sent to Roblox's own authorization page. We never see your Roblox password. If you approve, Roblox returns an authorization code that we exchange for a short-lived access token, which we use exactly once to read your public profile and then discard — the access token is never stored. We request only the openid profile scopes.

Stored	Why
Roblox user ID	Stable identifier for the link; prevents one account verifying twice.
Roblox username and display name	Shown to staff, and used for optional Discord nickname syncing.
Roblox profile URL and avatar image URL	Displayed in verification confirmations and staff lookups.
Your Discord user ID	The link is Discord user → Roblox account; without it the link has no meaning.
Time of linking and the Discord server it was done in	Audit trail for staff, and to apply the right verified role.

We do not receive or store your Roblox email address, password, payment information, private messages, friends list, or inventory.

2.2 Discord bot use

Discord user IDs, usernames, nicknames, avatars and role membership for members of servers the bot is in.
Moderation records created by staff (warnings, mutes, bans, notes) and the reasons entered for them.
Support ticket contents and transcripts, where the ticket system is enabled.
Activity counters used for leaderboards and staff statistics (message/XP counts, ticket handling counts).
Configuration a server's staff set for their own server.

Message content is processed to run commands, automod rules and ticket transcripts. We do not build advertising profiles and we do not read direct messages outside of the bot's own DM interactions with you.

2.3 Dashboard sign-in

Signing in with Discord stores a session record containing your Discord user ID, username, avatar URL and the permissions you have been granted, plus a session cookie in your browser. The cookie is strictly necessary for the dashboard to work; we use no advertising or analytics cookies and no third-party trackers.

2.4 In-game squad data

The community's squad tracking tool reports in-game roster and donation activity — Roblox usernames, token/points totals, and join/leave/kick events — to the dashboard so staff can see squad contribution. This is public in-game group activity, not private account data.

2.5 Technical data

Our server and its hosting provider keep short-lived operational logs (IP address, request path, timestamp, error details) needed to run the service securely and diagnose faults.

3. Why we may process your data (legal bases)

Consent — Roblox verification is entirely optional and only happens after you approve it on Roblox's own consent screen. You may withdraw consent at any time (see section 7).
Legitimate interests — running moderation, anti-abuse, and the community features members ask for, in a way that is proportionate and expected.
Legal obligation — where we must retain or disclose data to comply with law.

4. How long we keep it

Roblox links — kept until you unlink, until staff remove the link, or until the bot leaves the server.
Squad activity feeds — rolling window, automatically pruned after roughly 72 hours.
Dashboard sessions — expire automatically; deleted on sign-out.
Moderation records and ticket transcripts — kept while relevant to the server's moderation history, and deleted on request unless needed to handle abuse.
Operational logs — short retention, then overwritten.

5. Who we share it with

We do not sell your data, and we do not share it for advertising. Data is shared only with:

Discord — inherently, because the bot operates on Discord (Discord's privacy policy).
Roblox — during the OAuth exchange you initiate (Roblox's privacy policy).
Our hosting provider — which stores the server's data on our behalf.
Server staff — moderators of a Discord server can see the data belonging to their own server, including verified Roblox usernames.
Legal authorities — where we are legally required to disclose.

6. Security

Data is stored on access-controlled servers. Dashboard access requires authentication, sessions use secure, HTTP-only cookies over HTTPS, machine-to-machine endpoints are token-authenticated, and OAuth tokens are never written to disk. No system is perfectly secure, so we cannot guarantee absolute security, but we will notify affected users of a breach that presents a significant risk to them.

7. Your rights and choices

You can ask us to:

tell you what data we hold about you;
correct data that is wrong;
delete your data ("right to erasure");
restrict or object to certain processing;
receive a copy of your data in a portable format.

The fastest way to remove a Roblox link is to unlink it through the bot or ask a staff member. For anything else, email [email protected] from an account we can tie to your Discord identity, or open a ticket. We aim to respond within 30 days.

You may also revoke this application's access from your Roblox account settings at any time; doing so prevents future access, and you should also ask us to delete the stored link if you want it removed.

8. Children

The service is not directed at children under 13, and we do not knowingly collect their data. If you believe a child under 13 has provided data to us, contact us and we will delete it. Where local law sets a higher minimum age for consent to online services, that higher age applies.

9. International transfers

Our infrastructure and providers may process data outside your country. Where required, we rely on appropriate safeguards for such transfers.

10. Changes to this policy

We may update this policy. Material changes will be announced in the Power Legends Discord server, and the "last updated" date above will change. Continued use after a change means you accept the updated policy.

11. Contact

Questions or requests: [email protected]