Privacy Policy · RoRelay

In short: We store your Fluxer ID and your Roblox ID, username and display name so communities can give you roles. We never see your passwords, we don't sell anything or track you, and /unlink deletes your link at any time.

This Privacy Policy explains what information RoRelay ("we", "us") collects when you use the RoRelay bot on Fluxer, the website at rorelay.link and the dashboard, why we collect it, who can see it, how long we keep it, and the choices you have.

1. Information we collect

When you link your accounts

Your Fluxer user ID and username, from Fluxer sign-in (scope identify).
Your Roblox user ID, username and display name, from Roblox sign-in (scopes openid and profile).
The date and time you verified.

When you use RoRelay in a community

A record of which communities have already welcomed you, so you're not messaged twice.
If you own Premium, your Fluxer user ID and which server your subscription is on.

When you manage a community

Dashboard sign-in also asks Fluxer for your list of communities (scope guilds), to show the ones you manage. It's kept only in your sign-in cookie, not in our database.
The settings admins choose: roles, channels, messages, binds, group locks and restrictions. A restriction can include a Roblox user or group ID and a reason written by an admin.

Automatically

Our server keeps short-term logs for troubleshooting, which can include IP addresses, account IDs and errors.
One cookie keeps you signed in. It expires after an hour. We don't use advertising or tracking cookies, or analytics.

We never see or store your Fluxer or Roblox password, your email address, or payment card details.

2. Information we look up but don't keep

To decide which roles you get, RoRelay reads public Roblox information, such as your group ranks, badges, game passes and items, and Fluxer information such as your roles in a community. This is kept in memory for about a minute and never saved. /getinfo shows public Roblox profile details (avatar, ID, account age, bio and friend counts) and deliberately leaves out past usernames and group lists.

3. How we use information

To link your accounts and give you roles and nicknames in communities that use RoRelay.
To check requirements a community has set, and tell you by DM when you don't meet them.
To send the welcome and verification DMs described on our website.
To let community staff look up linked accounts with /getinfo and /reversesearch.
To run the dashboard and Premium, keep RoRelay secure, and fix problems.

We don't sell your information, use it for advertising, or build profiles about you.

4. Who can see your information

Communities you're in that use RoRelay: your roles and nickname reflect your Roblox account, and their staff can see which Roblox account you linked.
Fluxer: we send it the roles, nicknames and messages RoRelay applies.
Roblox: we ask its public APIs about your account, using your Roblox ID.
Our service providers: our hosting provider runs the server and stores the database, and Cloudflare protects and delivers the website. They only handle data to provide those services.
When the law requires it, or to protect people's safety or the Service.

5. How long we keep it

Your link: until you /unlink or ask us to delete it.
Welcome records: until you ask us to delete them, so a returning member isn't welcomed again.
Community settings: while the community uses RoRelay, and afterwards so they come back if RoRelay is added again, until the community's owner asks us to delete them.
Subscription records: as long as needed to provide Premium and keep accurate records.
Server logs: only for a short time, and they're cleared when the server restarts or the host rotates them.
Sign-in cookie: one hour.

6. Your choices and rights

You can delete your link at any time by typing /unlink in any RoRelay community. You can change which Roblox account is linked by verifying again. You can also ask us to show you the information we hold about you, correct it, or delete it, by contacting [email protected]. Depending on where you live (for example the EU, UK or California), you may have further rights, including to object to or restrict how we use your information and to complain to your data protection authority. We'll answer requests within 30 days and won't treat you differently for making one.

7. Legal bases (EU and UK)

We use your information to provide the Service you asked for when you link your accounts or add RoRelay (performance of a contract), and for our legitimate interests in keeping RoRelay secure and letting communities run the requirements they choose. Where the law requires consent, we'll ask for it.

8. Children

RoRelay is not meant for children under 13, and we don't knowingly collect information from them. We only store the account details listed above, never contact details. If you believe a child under 13 has linked an account, contact [email protected] and we'll delete it.

9. Security

Sign-in uses Fluxer's and Roblox's official OAuth with PKCE, the website is served over HTTPS, and the sign-in cookie is signed so it can't be tampered with. Access to the server and database is limited to the people who run RoRelay. No system is perfectly secure, but if a breach affects your information we'll let you know as the law requires. If you find a security problem, please report it privately to [email protected].

10. Where information is stored

RoRelay's server and database are run by our hosting provider and may be in a different country from you. By using RoRelay you understand your information may be processed there, with the protections described in this policy.

11. Changes to this policy

If we change what we collect or how we use it, we'll update this page and the date at the top, and give notice of important changes on the website or in our support community.

12. Contact

Privacy questions or requests: [email protected].