Privacy Policy

RoGoid is a Discord bot and web dashboard that lets Discord servers verify which Roblox account a member owns. This policy explains what personal data we process, why, who receives it, how long we keep it, and the rights you have.

Who is responsible for your data

The data controller is the individual who operates RoGoid, based in Denmark. You can reach us about anything in this policy:

• Email: admin@rogoid.xyz
• Discord: message 26rk or open a ticket in the RoGoid support server for general questions

Requests to see, correct or delete your data are handled by email only, not through Discord tickets. Email admin@rogoid.xyz and we'll take it from there.

What we collect and where it comes from

• Discord account data: your Discord user ID, username and avatar, from Discord when you sign in, run a command, or join a server that uses RoGoid. We work out when your Discord account was created from your user ID.
• Roblox account data: your Roblox user ID, username, display name, avatar and account creation date, from Roblox when you sign in with Roblox to verify.
• Connection data: your IP address and browser user agent at the moment you verify, plus the result of a VPN and proxy check on that IP address. See "Your IP address" below.
• Verification history: when you verified, in which server, how (signed in with Roblox, re-verified automatically, or verified manually by server staff), and whether it succeeded or was blocked and why.
• Moderation data: suspensions that server staff apply to you in RoGoid, who applied them, and the reason.
• Sign-in data: the Discord sign-in tokens that keep you logged in to the dashboard and let it list the servers you manage.
• Support and community data: if you use them, your support tickets, emails you send us and our replies, staff applications (including your answers), giveaway entries, testimonials, and Top.gg votes. Top.gg tells us your Discord ID when you vote.
• Voice support calls: if you request a call on our Contact Support page, the issue you picked and any description you write, when you joined the queue, when the call started and ended, which staff member took it, how it ended, notes our staff write about it, and, if a staff member removes your request from the queue, the reason they give (which is shown to you). Calls are never recorded. The audio is encrypted and goes directly between your browser and the staff member's browser, or on some networks through an encrypted relay server that can't listen in, and isn't stored by RoGoid.
• Browser notifications: if you turn on notifications on the Contact Support page or in the support console, your browser shows them on your own device. We don't use a push service, so nothing about your notifications passes through us or anyone else. Your choice is saved only in your browser (see our Cookie Policy).
• RoGoid staff: if you're on the RoGoid team, we also keep your support availability (Available, Busy or Offline), when you were last active in the support console, the calls you took or transferred, the notes you wrote (which carry over to whoever a call is transferred to), and a log of administrative actions you take in the console, such as removing a request from the queue or changing support settings.
• API usage: if you or your bot call the RoGoid API, each request's time, endpoint, result, IP address and user agent, plus the first few characters of the API key used. Only RoGoid staff can see it, and we use it to fix problems and spot abuse.
• RoGoid+ data: which server a subscription or key belongs to, who redeemed it, and for Robux purchases, the buyer's Roblox user ID and username. We never receive card or payment details.

You don't have to verify. If you don't, you won't receive the verified role in servers that require it.

Why we use it and our legal basis

• Providing verification and the dashboard. Linking your Discord and Roblox accounts, giving you roles and nicknames, signing you in, and showing your servers. Legal basis: necessary to provide the service you ask for (GDPR Article 6(1)(b)).
• Preventing abuse. VPN and proxy checks, alt account detection, suspensions, and keeping verification history. Legal basis: our legitimate interest, and that of the servers using RoGoid, in stopping ban evasion, fraud and abuse (Article 6(1)(f)).
• RoGoid+ subscriptions and keys. Activating and managing what was bought. Legal basis: necessary to provide what you paid for (Article 6(1)(b)).
• Support and community. Handling tickets, voice support calls, emails and staff applications, running giveaways, and announcing votes and new members in our support server. Legal basis: our legitimate interest in supporting users and running our community (Article 6(1)(f)).
• Testimonials. Showing your name, avatar, quote and server details on our homepage. Legal basis: your consent (Article 6(1)(a)), which you can withdraw at any time.

Where we rely on legitimate interests, you have the right to object. See "Your rights" below.

Your IP address

When you verify in a server with VPN blocking turned on, your IP address is sent to an IP intelligence provider to check whether it belongs to a VPN, proxy, Tor, or hosting network, or has a high risk score. We use proxycheck.io, and IPQualityScore if proxycheck.io is unavailable.

We store your raw IP address and a hashed copy with your account link. The raw IP address is encrypted at rest (AES-256-GCM); only our Project Lead and Project Executive can decrypt and view it, and only to investigate abuse. The hashed copy lets us spot accounts that verify from the same connection without decrypting anything.

Server administrators never see your IP address. It doesn't appear in member lists, alt account views, logs, the API or webhooks. Admins only see a flag saying an account shares a connection with another verified account.

Alt detection and automated decisions

Links between Discord and Roblox accounts are tracked across every server that uses RoGoid. If your Discord account has verified with more than one Roblox account, or shares a Roblox account or connection with another Discord account, admins of RoGoid+ servers you're in can see that.

Some decisions are made automatically:

• If a server has VPN blocking on and your IP address is flagged, your verification there is blocked.
• If staff suspend an account in a server, anyone who then tries to verify there from the same connection (IP address) is blocked too.
• In RoGoid+ servers with VPN blocking on, suspending an account also automatically suspends the accounts RoGoid has linked to it in that server.

These checks can sometimes catch innocent people, for example when many homes share one IP address. If you think a decision is wrong, ask that server's staff to review it. They can verify you manually or lift a suspension. You can also contact us.

Who receives your data

• Staff of servers you verify in: your linked Roblox account, verification history, account ages and suspension status, through the dashboard, the verification log channel they choose, and if they set them up, their API and webhooks. Data they send to their own systems through the API or webhooks is their responsibility.
• Discord: RoGoid runs on Discord, so messages RoGoid sends are stored by Discord.
• Roblox: we use Roblox to sign you in and to look up your avatar and account age.
• proxycheck.io and IPQualityScore: receive your IP address for the check described above.
• Service providers that run RoGoid: our hosting provider (Discloud), our database provider (MongoDB Atlas), and our image storage provider (Backblaze B2).
• The staff member on a voice support call: to connect a call, your browser and theirs exchange network details, which can include your IP address, unless the call is routed through our relay server. RoGoid staff only use this to connect the call.
• Top.gg: if you vote for RoGoid, Top.gg shares your vote with us, and we announce it in our support server.

We don't sell personal data. Some of these providers are based outside the EU/EEA, including in the United States, so your data may be transferred there. Contact us for details of the safeguards that apply to a transfer.

How long we keep it

• Account links: kept while your account is linked and after you unlink, so abuse and ban evasion can still be detected, until you ask us to delete them, unless we need to keep them for one of the reasons under "Deleting your data".
• Raw IP address and user agent: kept with your account link on the same basis. We don't currently delete them automatically after a set period.
• Verification history: kept on the same basis as account links. We don't currently delete it automatically after a set period.
• VPN block records: kept on the same basis as account links. We don't currently delete them automatically after a set period.
• Suspension records: kept until server staff lift the suspension, which deletes the record.
• Dashboard sessions: up to 14 days.
• Short-lived records, such as a verification in progress: deleted automatically after about 15 minutes.
• Log messages posted to Discord channels: stay in the channel until they're deleted.
• Voice support call records: deleted automatically after a period set by our support administrators (180 days by default, and never more than two years). The technical connection data exchanged to set up a call is deleted after 2 hours. The support console's log of administrative actions is kept for one year.
• Support tickets, emails, staff applications, giveaway entries, testimonials and RoGoid+ records: kept until no longer needed or until you ask us to delete them. You can withdraw consent for a testimonial at any time and we'll remove it.

Deleting your data

You can unlink a Roblox account at any time from your RoGoid account settings. This removes it from server admin views, but the record and its history are kept for abuse prevention.

To have your data deleted, email admin@rogoid.xyz. Once we've confirmed you own the Discord account, we delete everything that's only about you: your account and sessions, all of your Roblox links including stored IP data, your verification history, VPN block and suspension records, support tickets, voice support call records, staff applications and testimonials. We also remove the verified role and nickname RoGoid gave you. Records shared with a server or with other people, such as RoGoid+ purchases, giveaways and server settings, are kept with your identity removed. We also delete the log messages RoGoid posted about you, both in our own channels and in the log channels of servers you verified in. You'll receive a written confirmation listing exactly what was removed. We keep the emails we exchanged with you about the request as a record that we handled it.

Messages other people wrote about you, and copies server staff made of RoGoid's logs, aren't controlled by RoGoid. You can ask those servers' staff to remove them.

The right to deletion isn't absolute. We may refuse or delay deleting specific data only where the GDPR allows it, for example while it's needed for an ongoing abuse investigation, or to establish or defend a legal claim. If we do, we'll tell you which data and why.

Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you and get a copy of it.
• Rectify data that's wrong. Your Discord details update each time you sign in, and your Roblox details each time you verify.
• Erase your data, as described above.
• Restrict how we use your data, for example while we check a complaint.
• Object to processing based on legitimate interests, including the VPN checks and alt detection. If you object, servers that use these protections may not be able to verify you.
• Data portability: receive the data you gave us to use the service, such as your account and link data, in a machine-readable format.
• Withdraw consent where we rely on it, such as for testimonials. This doesn't affect anything we did before you withdrew it.

To use any of these rights, email admin@rogoid.xyz. It's free. We'll reply within one month, and may ask you to confirm you own the Discord account involved before acting on a request, for example by opening a ticket in our support server from that account.

Complaints

If you think we've handled your data wrongly, you can complain to the Danish Data Protection Agency (Datatilsynet), or to the data protection authority in the EU/EEA country where you live or work. We'd appreciate the chance to sort it out with you first.

Cookies

See our Cookie Policy for the cookies we set in your browser.

Changes to this policy

If we change this policy, we'll update the date at the top. For significant changes, we'll also post a notice in our support server.

Contact

Get support or join our Discord