When you interact with the bot or join the server, we may process your Discord user ID, username, global display name, avatar, server roles, and the nickname the bot itself sets on your account (your linked Roblox username — see below). We do not read or store the contents of your regular messages; message data we act on is limited to slash command inputs and interactive button/menu responses you submit directly to the bot.
When you link a Roblox account through Verify with Roblox, Roblox asks you to review and approve a specific set of permissions ("scopes") before anything is shared with us. We only ever receive what you approve, and never your Roblox password. See Roblox OAuth Scopes below for the full list and why each is requested.
Independent of OAuth, our systems also look up publicly-available Roblox information for community-management purposes — for example, a member's current rank in the group, group membership, and username history. This uses Roblox's own public APIs and does not require your consent in the same way OAuth does, since it's the same information visible to anyone browsing Roblox.com.
We store a record for each linked Roblox account: which Discord account it's linked to, the Roblox account ID and username (and a previous username if you've renamed since linking), when it was linked, and the outcome of the automated and staff-reviewed background checks described in How We Use Information.
Nighthawk Commandos tracks member activity (events attended, activity points, quota completion), officer performance, and disciplinary history (strikes, the Reserve system, Internal Affairs cases) as part of normal community operation. These records are tied to your Roblox username and, where linked, your Discord account.
Server staff who log into the web dashboard authenticate via their own Discord account (standard Discord OAuth login) — we store a session token and your Discord profile info for the duration of that login. Service-level API keys used to connect other tools to our API are not tied to any individual member.
Our Roblox sign-in requests the following permissions. Roblox shows you this exact list before you approve anything, and you can decline or revoke access at any time from your Roblox account settings.
| Scope | What it grants | Why we request it |
|---|---|---|
| openid | Confirms your Roblox identity | Required baseline for any sign-in — proves you own the Roblox account being linked. |
| profile | Basic profile info (username, display name, account creation date) | Shown in your linked-account list and used in the automated background check's account-age check. |
We do not sell data, use it for advertising, or share it with anyone outside the systems listed in Third-Party Services below.
Operating these services necessarily involves a small number of infrastructure and platform providers, each bound by their own privacy terms:
Verification records are retained for as long as you remain a member of the Community, or until you unlink your account (see below). Disciplinary and activity records (strikes, IA cases, event logs) are retained longer for accountability and audit purposes, consistent with standard community moderation practice, even after membership ends. We retain the minimum we reasonably need for these purposes and delete or anonymize records on request as described below, except where we're required to keep something for legitimate moderation, security, or legal reasons.
You can unlink a Roblox account yourself at any time by running /accounts unlink in Discord — this
immediately removes the verification record and any roles it granted.
To request a full erasure of your data from our systems, email admin@cipherinteractive.dev with the subject line "[IMPORTANT] Data Erasure Request", or reach out to server staff directly in the Nighthawk Commandos Discord server. Include enough information (your Discord ID and/or Roblox username) for us to locate your records. We'll confirm once the request is processed. Some records — e.g. disciplinary history relevant to an active or unresolved case — may be retained in redacted form where deleting them entirely would compromise a legitimate ongoing investigation or accountability record.
We apply reasonable technical measures to protect the data we hold — scoped API credentials, access-controlled admin sessions, and encrypted connections to our databases — but no system is perfectly secure, and we can't guarantee absolute protection against every possible compromise.
Our services are provided through Discord and Roblox and are subject to those platforms' own age requirements (Discord requires users to meet the minimum age in their jurisdiction, generally 13+). We do not knowingly collect data from anyone below that threshold beyond what Discord or Roblox themselves already require for platform access.
We may update this policy as the service changes. Meaningful changes will update the effective date at the top of this page; continued use of the bot or dashboard after a change means you accept the updated policy.
Questions about this policy, or requests regarding your data: admin@cipherinteractive.dev (use subject "[IMPORTANT] Data Erasure Request" specifically for deletion requests), or contact staff in the Nighthawk Commandos Discord server.