Contents
What is RoCord?
RoCord is a Discord bot that allows server administrators to verify their members' Roblox accounts, enabling role assignment, nickname updates, ban synchronization, and identity confirmation between the two platforms. Verification is available through Discord commands or at https://rocord.superchiefyt.xyz.
This Privacy Policy explains what personal data RoCord collects, why we collect it, how it is used and stored, and your rights regarding that data. By using RoCord in any capacity, as a server administrator or as a user being verified, you agree to the practices described in this policy.
Independent Service: RoCord is an independent service and is not affiliated with, endorsed by, or in any way controlled by Discord Inc. or Roblox Corporation. All trademarks and brand assets belong to their respective owners.
What Data We Store
RoCord stores only the minimum data necessary to provide its verification and configuration services. We do not collect names, email addresses, passwords, or any content from your messages.
| Data Type | Category | Purpose |
|---|---|---|
| Discord User IDs | User | Links a Discord account to a verified Roblox profile |
| Roblox User IDs | User | Links a Roblox account to a verified Discord profile; used in ban sync lists |
| Discord Server IDs | Config | Identifies which server a configuration belongs to |
| Channel IDs | Config | Stores server-specific channel settings (e.g. verification channel) |
| Role IDs | Config | Stores server-specific role assignments for verified members |
| Banned Roblox User IDs | Auto | Automatically added/removed from a server's ban list when a linked member is banned/unbanned |
What We Do Not Collect
- Message content, DMs, or any communication data
- Roblox usernames, display names, or profile content
- Discord usernames, email addresses, or profile information
- IP addresses, device identifiers, or browser fingerprints
- OAuth2 access tokens or refresh tokens (not persisted after authentication)
- Payment or financial information of any kind
Purpose of Data Processing
All data collected by RoCord is used exclusively to provide, operate, and improve the bot's core functionality. We do not sell, rent, or trade your data to any third party.
User Verification Data
Your Discord User ID and Roblox User ID are stored together to create a persistent verification link. This allows servers you join to confirm your Roblox identity without requiring you to re-verify each time. Other users can look up your linked Roblox profile using the /whois command with the discord_user option, and developers may query it via the RoCord API (which requires authorization).
Role and Nickname Updates
Upon verification or re-verification, RoCord will update your member roles and/or nickname in any server where the bot is active and you are a member. This is made possible through Discord's guilds OAuth2 scope, which allows RoCord to identify the mutual servers between you and the bot in order to apply the correct server configuration.
Server Configuration Data
Server IDs, Channel IDs, Role IDs, and associated settings are stored to apply the correct verification flow and role assignment rules configured by that server's administrators.
Automatic Ban Synchronization
When a user with a linked Roblox account is banned from a Discord server, their Roblox User ID is automatically added to that server's Roblox ban list. If the ban is reversed, the Roblox User ID is automatically removed from the list. This process operates entirely within the scope of that individual server and does not share data across unrelated servers.
We process data based on legitimate interest, specifically, providing the service you or your server administrators have chosen to enable. You may withdraw this at any time by deleting your verification data (see Your Rights).
How Authentication Works
RoCord uses the official OAuth2 protocols provided by both Discord and Roblox to verify identity. This is the same secure standard used across the web (e.g. “Sign in with Google”). Verification can be initiated via the /verify command, the Verify button in any configured server channel, or at https://rocord.superchiefyt.xyz.
What Happens During Verification
- You are redirected to Discord's official authorization page to grant RoCord access using the scopes listed below.
- If Discord detects an existing Roblox connection in your Discord account, you will be given the option to link that account directly instead of going through Roblox OAuth2.
- If no existing connection is found, you are redirected to Roblox's official login page to authorize RoCord to read your Roblox User ID.
- Once both IDs are obtained, they are stored together in our database as your verification record.
- OAuth2 tokens (the temporary keys used during this exchange) are not stored persistently. Only the resulting User IDs are saved.
Discord OAuth2 Scopes
identifyReads your Discord User ID so RoCord can create and manage your verification record.
connectionsChecks whether you have already linked a Roblox account within Discord's own connections system. If a Roblox connection exists, you can choose to use it directly instead of completing a separate Roblox OAuth2 flow.
guildsIdentifies the mutual servers between you and RoCord. This allows the bot to update your member roles and/or nickname across all servers where it is active whenever you verify or re-verify.
Reads your Roblox User ID only. We do not access your inventory, friends, currency, groups, or any game data.
RoCord only facilitates the OAuth2 handshake. We never see your Discord or Roblox password. Authentication is handled entirely by Discord and Roblox's own secure systems.
How Long We Keep Your Data
User Verification Records
Your Discord User ID and Roblox User ID are retained until you explicitly request deletion using the “Delete Profile” button available through the /verify command or within a configured verification channel. You may also contact us via the support server for assistance with manual deletion. We do not automatically expire individual verification records.
Server Configuration Data
Configuration data (Server IDs, Channel IDs, Role IDs) is retained for as long as RoCord remains in a server. When RoCord is removed from a server, its configuration data is automatically scheduled for deletion within 1-2 days.
Ban Synchronization Records
Roblox User IDs on a server's ban list are maintained in real-time: added on ban, removed on unban. They persist only for the duration of the active ban and are tied to the lifespan of the server's configuration.
All data is stored in a MongoDB database with access restricted to RoCord's operational infrastructure. We do not use your data for analytics, advertising, or any purpose beyond service delivery.
Control Over Your Data
You have the right to access, correct, and delete the data RoCord holds about you. The following actions are available to all users:
Individual Users
- View your data: Use
/whoisto see your linked Roblox profile. Other users can also use/whoiswith thediscord_useroption to view your public verification info. - Delete your data: Use the “Delete Profile” button in the
/verifycommand response or within a configured verification channel to permanently remove your verification record from our database. - API access: Your verified profile may be queried via the RoCord API by authorized parties. API access requires explicit authorization and is not open to the public.
- Request manual deletion: Contact us via the support server if you encounter any issues with self-service deletion.
Server Administrators
- Delete server configuration: Remove RoCord from your server. Configuration data will be cleared within 1-2 days.
- Request immediate deletion: Contact us via the support server to request expedited removal of all data associated with your server.
We will respond to all data requests within 7 business days.
External Services & Affiliations
No Affiliation
RoCord is an independent, community-developed service. We are not affiliated with, endorsed by, sponsored by, or in any way controlled by Discord Inc. or Roblox Corporation. “Discord” and “Roblox” are trademarks of their respective owners.
Infrastructure
RoCord uses MongoDB for database services. Data stored in MongoDB is subject to MongoDB's own data processing agreements. We do not share identifiable data with MongoDB beyond what is necessary to store and retrieve records.
No Data Sales
We do not sell, license, trade, or share your personal data with any advertisers, data brokers, or third-party services. Your data is used solely to operate RoCord.
Links to External Services
RoCord may direct you to Discord or Roblox for OAuth2 authentication. These platforms operate under their own separate privacy policies, which we encourage you to review.
How We Protect Your Data
We take reasonable technical and organizational measures to protect the data stored by RoCord, including:
- Database access restricted to RoCord's backend infrastructure only
- Encrypted connections (TLS) between our services and the database
- No storage of OAuth2 tokens beyond the authentication session
- Minimal data collection, only User IDs and configuration identifiers are stored
While we implement industry-standard security practices, no system is completely immune to breaches. In the event of a data security incident affecting user data, we will notify affected users via our support server as promptly as possible.
Use by Minors
RoCord is a bot available on Discord, which requires users to be at least 13 years of age per Discord's Terms of Service. We do not knowingly collect personal data from children under the age of 13.
If you believe a child under 13 has submitted data to RoCord without proper consent, please contact us immediately via the support server and we will promptly delete the relevant records.
Policy Updates
We may update this Privacy Policy from time to time. When we do, the “Last updated” date at the top of this page will be revised accordingly. For material changes that affect how your data is handled, we will announce updates in our support server.
Your continued use of RoCord after any changes constitutes your acceptance of the updated policy. If you disagree with the changes, you may delete your verification data and discontinue use of the bot.
Questions or Concerns?
If you have any questions about this Privacy Policy, want to exercise your data rights, or need to report a security concern, reach out to us directly through our support server.