Privacy Policy

1. Scope

This Privacy Policy applies to FireKeeper's Discord bot, web dashboard, and Roblox account-verification service. Individual Discord server administrators control how they configure FireKeeper and may maintain their own server rules or privacy notices.

2. Information We Process

• Discord account information, including your user ID, username, display name, avatar, and the servers needed to authenticate you and determine dashboard access.
• Roblox profile information authorized through Roblox OAuth, including your Roblox user ID, username, display name, profile URL, and configured group membership or role.
• A persistent link between your Discord user ID and Roblox user ID so verification can be restored after a rejoin and reused in other FireKeeper servers.
• Server and feature records created through FireKeeper, such as guild configuration, moderation cases, role assignments, forms, tickets, reminders, and other community data.
• Limited technical information required for security and operation, such as encrypted session cookies, OAuth state, timestamps, and application error logs.

3. How We Use Information

FireKeeper processes this information to:

• Authenticate users and protect dashboard access.
• Link Discord and Roblox identities at the user's request.
• Check configured Roblox group membership and update Discord roles or nicknames.
• Remember a completed verification so users do not need to repeat it unnecessarily.
• Operate moderation, automation, community-management, and security features.
• Diagnose failures, prevent abuse, and maintain service reliability.

FireKeeper does not sell personal information or use it for targeted advertising.

4. OAuth Tokens and Cookies

Discord dashboard tokens are stored in an encrypted, HTTP-only session cookie and are used to maintain your signed-in session. Roblox access and refresh tokens are not retained after verification; FireKeeper stores only the resulting account link and profile information needed for future role restoration. Short-lived encrypted cookies protect OAuth state while sign-in is in progress.

5. Sharing and Service Providers

Information is shared only as needed with Discord, Roblox, hosting and database providers, and integrations enabled by a server administrator. Relevant verification results may be shown to authorized server staff. FireKeeper may also disclose information when required by law or necessary to protect users, the service, or others from harm.

6. Retention and Security

Account links and server records are retained while needed to provide FireKeeper's features, satisfy legitimate operational or security needs, or comply with law. Reasonable technical safeguards are used, including encrypted session data, restricted credentials, and access controls. No online service can guarantee absolute security.

7. Your Choices

• You can sign out to remove the FireKeeper dashboard session cookie.
• You can revoke FireKeeper's authorization from your Roblox account settings.
• You can leave a Discord server or ask its administrators about server-specific records.
• You can request access, correction, unlinking, or deletion through the contact method below. Some records may be retained where legally or operationally required.

8. Platform Requirements

FireKeeper is intended for users who are permitted to use Discord and Roblox under those platforms' terms and applicable law. Do not use FireKeeper if you do not meet those requirements.

9. Changes and Contact

This policy may be updated as FireKeeper changes. The effective date above identifies the current version. For privacy questions or data requests, contact the project maintainer through the FireKeeper GitHub repository. Do not post access tokens, passwords, or other sensitive information in a public issue.