Privacy Policy

What we collect

• Account details: name, email address and a hashed password (if you use one).
• Linked accounts: when you connect Roblox or Discord, we receive your user ID, username, display name and avatar from that service. We never ask for or receive your Roblox or Discord password.
• Roblox experience access: if you use “Connect with Roblox”, we read the list of experiences you choose to share and their basic details (name, owner, start place). We use this only to verify you can manage them and do not store the access token.
• API keys you add: Roblox Open Cloud keys are encrypted at rest and only used on our servers to perform the actions you request (for example bans, in-game commands or analytics).
• Experience data: staff lists and roles, moderation records (including the Roblox user IDs and usernames of moderated players), analytics for your experiences, Discord server and role settings, and audit logs of actions taken.
• Technical data: IP address and browser user agent for sign-in sessions, security and rate limiting. We use a session cookie to keep you signed in and store your light/dark theme choice in your browser.
• Billing: payments are handled by Stripe. We receive subscription status and invoice records, never your full card details.

How we use it

• To provide the service: authentication, permissions, moderation, analytics, Discord commands and role synchronization.
• To keep accounts and experiences secure, including audit logs and abuse prevention.
• To process subscriptions and send service emails such as invitations and password resets.

We do not sell personal data and do not use it for advertising.

Who we share it with

• Roblox and Discord, through their official APIs, to carry out actions you or your staff request.
• Service providers that run RoWarden: hosting, database, email delivery and Stripe for payments.
• The owner and authorized staff of an experience can see staff and moderation information for that experience.
• Authorities, if required by law.

Retention

We keep account data while your account exists. Moderation records and audit logs are kept to provide history to the experience owner. Sign-in sessions expire automatically, and short-lived verification data (codes, sign-in links, Roblox experience grants) is deleted within hours.

Your choices

• Unlink Roblox or Discord at any time in Account settings.
• Revoke RoWarden's access from your Roblox and Discord authorized-apps settings.
• Remove API keys from your key vault at any time.
• Delete your account in Account settings, or contact us to access or delete your data.

Children

RoWarden is a tool for developers and is not directed at children under 13. Roblox requires users to be 13 or older to authorize OAuth apps.

Contact

Questions or requests: support@rowarden.com. RoWarden is not affiliated with Roblox Corporation or Discord Inc.