Back to site

Privacy Policy

Last Updated: July 2026

Georgia State Roleplay ("GSRP", "we", "our") operates this dashboard and its associated services (verification, staff applications, training, the shop, the live server panel, transcripts, and staff tools). This Privacy Policy explains what information we collect, how we use it, and how it is stored and shared.

Information We Collect

  • Discord Information: When you authenticate via Discord OAuth, we receive your Discord user ID, username, global/display name, avatar, and your membership and roles in the GSRP server. This is used for access control and to display your identity within the dashboard.
  • Discord Server List (Staff Intake): If you use a staff transfer or fast-pass intake request, we read the list of other Discord servers you are a member of (server names, icons, whether you own them, and your permissions in them, up to 25 servers) and forward that list to the GSRP staff team via Discord for review. We use this only to process your request.
  • Roblox Information: During verification, your Roblox authentication code is forwarded to our Discord bot and is not stored by this service. Once linked, we store the association between your Discord account and your Roblox account (Roblox user ID and username) so we can display it and verify shop purchases.
  • Application Data & Integrity Monitoring: When you submit a staff or other application, we store your answers along with anti-cheat integrity signals collected while you complete the form: keystroke timing, paste events, a replayable typing timeline, tab-switching and window-focus events, mouse-leave and right-click events, idle periods, your detected operating system, your browser user agent, your IP address, and a timezone derived from your IP address.
  • Quiz & Training Results: Training quiz attempts, scores, answers, cooldowns, and ride-along scenario progress are stored for staff development and record-keeping.
  • Shop & Purchases: When you use the shop, we check whether your linked Roblox account owns the relevant Roblox game passes and store a record of the products you have claimed so rewards (such as Discord roles) are granted once.
  • Server Data: When using the Live Panel, we proxy ERLC server data (player lists, staff lists, logs, moderation actions, and roleplay session records). Live player/presence data is held temporarily and is not persisted.
  • Visitor & Security Information: For anti-raid and security monitoring we collect your IP address, browser/device information, and the pages you visit. From your IP address we also derive geolocation and network data (country, region, city, approximate coordinates, ISP/organization, network/ASN, and proxy or VPN detection).

Third-Party Services

We rely on the following third parties to provide the service. Data is shared with them only as needed for functionality:

  • Discord: Authentication, role management, and delivery of notifications (including application, intake, and quiz records) to private staff channels via webhooks.
  • Roblox: Account verification and game-pass ownership checks.
  • ip-api.com: Your IP address is sent to this geolocation provider to determine timezone, location, and proxy/VPN status.
  • Hosting & Database Providers: Our application host and managed MySQL and MongoDB databases store the data described below.

How We Use Your Information

  • Verify your membership and roles in the GSRP Discord server and determine access permissions
  • Link your Roblox account for verification and shop purchase validation
  • Display your Discord identity within the dashboard
  • Process staff applications and verify their integrity (anti-cheat)
  • Process staff transfer/fast-pass intake requests
  • Record training and ride-along results for staff development
  • Monitor visitor traffic, IP addresses, and proxy usage for anti-raid security

Data Storage & Retention

  • Session Cookies: Encrypted session cookies managed by NextAuth.js. These expire when your Discord token expires.
  • MySQL Database: Applications (including the integrity signals above), transcript records, and shop claim records are stored in a secured database and retained for administrative purposes.
  • MongoDB Database: Discord user registry records (user ID, username/display name, avatar, and first/last login timestamps), quiz attempts, ride-along records, and visitor logs and profiles. Discord user registry records are retained so returning users remain registered until deletion is requested. Visitor logs and profiles are automatically deleted after 7 days.
  • In-Memory Cache: ERLC server and presence data is held temporarily in server memory and is not persisted.
  • Discord: Application, intake, and quiz notifications are posted to private staff-only Discord channels and are retained there.

Data Sharing

We do not sell or trade your personal information. Data is shared only with the third-party services listed above for the purpose of operating the dashboard, and application, intake, training, and moderation records are visible to authorized GSRP staff for review.

Your IP address is never shared with, sold to, or disclosed to any outside party. It is used only internally for anti-raid security and, in the case of geolocation, sent solely to our IP-lookup provider (ip-api.com) to determine your approximate location and proxy status. It is never published, handed to other members, or given to any third party for any other purpose.

Your Rights

  • You may sign out at any time, which invalidates your session
  • You may unlink your Roblox account from your Discord account
  • You may request deletion of your application or quiz records by contacting GSRP staff
  • You may request deletion of your Discord user registry record by contacting GSRP staff
  • Visitor logs and profiles are automatically removed after 7 days; transcript and administrative records are retained for record-keeping

Contact

For any privacy-related questions or data requests, please contact the GSRP staff team via our Discord server.