Short version: we store your Discord ID and the Roblox account you link to it, so bots in servers that use c2 can give you the right roles. We don't sell anything, run ads, or use trackers. Unlink any time from your account page, or ask us to delete everything.
Who we are
c2 ("we", "us") runs Discord bots and the website at this domain. This policy covers the bots, this website, and the Discord–Roblox verification service.
What we collect
- Discord data: your Discord user ID, username, and display name, received from Discord when you sign in. We never receive your Discord password.
- Roblox data: your Roblox user ID, username, and display name, received from Roblox after you sign in. We never receive your Roblox password.
- Your servers: when you sign in, Discord tells us which servers you're in. We only keep the name, icon and ID of servers you can manage, so the dashboard can list them.
- Server settings: if you manage a server, the roles, nickname format and group bindings you set on the dashboard, and who last changed them.
- Tickets: if you open or take part in a support ticket in a server that uses c2, the ticket's details, your answers to its questions, and the messages sent in it (with links to any files) are saved as a transcript. It can be viewed by the person who opened it, the people in it, and that server's staff. Closed tickets are deleted after a year.
- Verification records: which Roblox account is linked to which Discord account, and when.
- Technical logs: IP address, browser type, and request times, kept by our web server and by Cloudflare for security and abuse prevention.
We use one cookie to keep you signed in, and a short-lived one while you sign in with Discord or Roblox. We don't use cookies for tracking or advertising. We don't keep your Discord or Roblox access tokens: they're revoked as soon as we've confirmed who you are.
How we use it
- To link your accounts, so bots in Discord servers that use c2 can assign roles or nicknames.
- To stop abuse, such as one Roblox account being linked to many Discord accounts.
- To keep the service running and fix problems.
Where the UK GDPR or EU GDPR applies, we rely on legitimate interests to run the service you asked to use, and on your consent when you choose to link your Roblox account.
Who we share it with
We don't sell or rent personal data. We share it only with:
- Bots and staff of Discord servers that use c2, which can look up which Roblox account is linked to a Discord account.
- Service providers that host or protect the service: DigitalOcean (hosting) and Cloudflare (network and security).
- Authorities when the law requires it.
How long we keep it
We keep your link until you unlink it on your account page, which removes it straight away. Sign-in sessions expire after 30 days. If you ask us to delete all your data, we remove it within 30 days. Technical logs are kept for up to 30 days.
Your rights
You can ask to see, correct, export, or delete your data, and you can object to how we use it. Contact us using the details below. If you're in the UK you can also complain to the Information Commissioner's Office (ico.org.uk).
Security
All traffic is encrypted with HTTPS. Access to our servers and database is restricted to the people who run c2. No system is perfectly secure, but we'll tell affected users about any breach that puts their data at risk.
Children
You must meet the minimum age for Discord in your country (13 in most places) to use c2. We don't knowingly collect data from anyone younger.
Changes
If we change this policy we'll update the date at the top. For significant changes we'll also post a notice in the Discord servers that use c2.
Contact
Email [email protected] or message the c2 team in our Discord server.