Privacy Policy

Your Discord ID, username, avatar, and email. Your email is stored just to link your Stripe account with your Discord account for billing. If you are only signing in to the MDT or CAD, an email is not required.

Your IP, browser fingerprint, and user agent. These are used to enforce suspensions. They are encrypted and not shared.

If you provide this, we use it to run commands and fetch information from your server.

The settings you configure for your workspace.

The record linking a Discord account to a verified Roblox account.

Anyone who joins your server gets a profile, different from an account, that shows their playtime.

This includes your server details, players, staff, emergency calls, mod calls, and similar.

The answers submitted to application forms on your workspace.

While your account is active, plus up to 90 days after deletion for fraud and legal purposes.

While your workspace exists; deleted within 30 days of a verified account deletion request, except where law requires otherwise.

While the workspace exists; owners can delete individual profiles or entries anytime.

The most recent 500 per server.

Until the form creator or the workspace deletes them.

Kept indefinitely for safety, legal compliance, and potential proceedings, not deleted on account closure.

Kept indefinitely unless you request deletion of that record.

Up to 30 days on Better Stack.

7 years for tax, accounting, and legal compliance, even after account deletion.

Access, rectification, erasure ("right to be forgotten"), restriction of processing, data portability, objection to processing, and the right not to be subject to solely automated decisions with legal effects. You also have the right to lodge a complaint with your local data protection authority.

The quickest way to exercise these rights is right in the dashboard. Sign in and go to Account > My Data, where you can request a full export of the personal data we hold about you, or delete your account and its associated personal data. Deletion requests are processed within 30 days; some records (abuse reports and Stripe transaction records) are retained where the law requires.

We process your data to perform our contract with you (running the Service), for our legitimate interests (security, fraud prevention, and improving the Service), to comply with legal obligations (tax, safety, and mandatory reporting), and on consent where we ask for it, which you can withdraw at any time.

Our providers may process data in the United States. Where we transfer EU/EEA or UK personal data, we rely on appropriate safeguards such as the EU Standard Contractual Clauses and the UK International Data Transfer Addendum.