Privacy Policy

1. Who is responsible

Technified is run by a private individual based in Germany (“we”). We are the controller under the General Data Protection Regulation (GDPR): we decide why and how personal data is processed here.

For anything about your data, write to support@technified.xyz. There is no data protection officer, because the law does not require one for a project of this size.

2. In short

• We process what Technified needs to work: your Discord and Roblox account details, and what happens in the servers and games that use Technified.
• We do not sell data, do not show advertising, and do not use analytics or tracking. The only cookies are the ones that keep you signed in.
• The bot reads messages only in ticket channels. It does not read or store the rest of a server's conversations.
• You can see, download and delete what is held about you yourself, under Account, Privacy. A ban stays in force even if you delete your account.
• Everything runs on Cloudflare. Discord and Roblox receive data because Technified works through their platforms.
• Questions and requests go to support@technified.xyz.

3. Whose data this is about

Technified processes data about four groups of people:

• Visitors of the website.
• Users who sign in to the dashboard with Discord, such as server owners and their staff, and members who verify, apply, appeal or manage their data.
• Community members of a Discord server or Roblox game that uses Technified, including people who have never signed in themselves. For example, a player banned in a game, or a member who opens a ticket.
• People who contact us.

If you are a community member who has never used Technified yourself, the parts most relevant to you are section 7, section 8, section 12, section 13 and section 18.

4. Visiting the website

When you open a page, your browser sends technical data to our hosting provider Cloudflare: your IP address, the time, the page requested, the referring page, and your browser and operating system as your browser reports them. This is needed to deliver the page, to keep the service stable and to fend off attacks. Logs of these requests are kept for a few days and then deleted automatically.

The website loads its fonts from our own server, not from Google or another provider. Some pages of the dashboard show profile pictures and emoji that are loaded directly from Discord (cdn.discordapp.com) and Roblox (rbxcdn.com). When they load, your browser connects to those services, which see your IP address. See section 14.

Legal basis: our legitimate interest in a secure and working website, Art. 6(1)(f) GDPR.

5. Signing in with Discord

You sign in with your Discord account. Discord asks you to allow Technified to read your account details and the list of servers you are in (the “identify” and “guilds” permissions). We do not ask for and never receive your email address or your Discord password.

We store:

• your Discord user ID, username, display name, profile picture and language setting;
• which of your servers use Technified, so the dashboard can show them. The list of your other servers is not stored;
• for each sign in, a session: when it started and was last used, your IP address and your browser's user agent. This lets you stay signed in, lets us end sessions, and helps us notice misuse of your account;
• when you were last active.

The permission Discord gives us is used once, during sign in, and is not stored.

Legal basis: providing the service you signed up for, Art. 6(1)(b) GDPR. For the IP address and user agent of a session, our legitimate interest in keeping accounts secure, Art. 6(1)(f) GDPR.

6. Linking a Roblox account

When you verify, you sign in to Roblox and allow Technified to read your public profile (the “openid” and “profile” permissions). We store your Roblox user ID, username and display name, linked to your Discord account, and when and how the link was made. We never see your Roblox password.

A link is made once and is then used only by the servers you agree to. Servers then use public information about your Roblox account to give you roles: your membership and rank in Roblox groups, items, game passes and badges you own, and the age of your account. We keep your last known rank in the groups a server cares about, so permission checks do not depend on Roblox answering in that moment.

In rare cases a server's staff links an account by hand. That is recorded with the staff member who did it, and is never carried to another server without you signing in to Roblox.

You can remove the link from a single server or entirely at any time, see section 18.

Legal basis: carrying out your request to link your accounts, Art. 6(1)(b) GDPR.

7. Technified in a Discord server

A server's owner adds the Technified bot and decides which features to use. Depending on that, Technified processes the following about the server's members:

• Membership: Discord user ID, username, server nickname and profile picture, roles, when someone joined and left, and whether they own or administer the server.
• Moderation: warnings, mutes, kicks and bans on Discord and in Roblox games, with the reason, the staff member who issued them, the time, the duration and any evidence files staff attach. Viewing evidence is itself recorded.
• Automatic filters: when one of the server's Discord AutoMod rules catches a message, the rule, the matched word and the caught content, and what happened as a result.
• Tickets: who opened a ticket, why, who handled it, and the messages and pictures sent in the ticket channel. The bot reads messages only in ticket channels. When a ticket is saved, a transcript is created that can be read after the channel is gone.
• Applications and appeals: your answers and uploaded files, the decision, and comments staff leave about it.
• Staff management (only for staff members): time on duty, actions taken in game, notes, strikes, quota results and leave requests.
• Audit log: every change made through Technified, who made it, when, and the IP address it came from.
• Public page: if a server publishes one, whatever the server chooses to show on it.

Servers can belong to an organization, a group of servers run together. Its servers can share moderation: a ban with organization reach applies in all of its servers, and its staff can see it. The privacy page in your account tells you when a punishment reaches further than the server you saw it in.

Please do not share sensitive information, such as health data, in tickets or applications. If you do, it is processed only as part of that conversation or application.

Legal basis: the legitimate interest of the server's community in being moderated and organised, and our legitimate interest in providing Technified for that, Art. 6(1)(f) GDPR. Where you use a feature yourself, such as applying or opening a ticket, also Art. 6(1)(b) GDPR.

8. Technified in a Roblox game

A server can connect its Roblox games. A connected game server reports which experience it is, how many players are on it and who they are (Roblox user ID and name), and its performance. That list is held only while the game server runs and is discarded after it stops reporting. When a player joins, the game asks Technified whether they are banned or muted. Commands staff send to a game, such as a kick or a message, are kept for 7 days.

Legal basis: the legitimate interest of the community in enforcing its rules in its games, Art. 6(1)(f) GDPR.

9. Keeping the platform safe

To protect Technified and its users, we limit how many requests can be made in a period of time, using the account, server, key or IP address a request comes from. We keep a list of Discord accounts, Roblox accounts and servers that may not use Technified because of serious or repeated violations of our Terms, with the reason and evidence. When we handle a report or abuse, we can look at the servers and accounts involved, and everything we do there is recorded.

Legal basis: our legitimate interest in a secure service free of abuse, Art. 6(1)(f) GDPR.

10. When you contact us

If you write to us, we use your message and contact details to answer it. Mail to our addresses arrives through Cloudflare Email Routing. We keep the message, its attachments and the technical details that show whether it really came from its sender (SPF, DKIM and DMARC results). We delete it when the matter is settled and at the latest after one year, unless we must keep it by law.

Legal basis: Art. 6(1)(b) GDPR where it concerns using Technified, otherwise our legitimate interest in answering you, Art. 6(1)(f) GDPR.

11. Email from us and mailing lists

We send mail through Cloudflare Email Service: answers to people who wrote to us, and messages to mailing lists, such as news for beta testers. For every message we keep who sent it, to whom, what it said and whether it went out, for one year.

Mailing lists. We put an address on a list only when its owner agreed to get that mail. We keep the address, a name if you gave one, who added it and when. Every message to a list carries a link to leave it, and mail clients can unsubscribe with one click. If you leave, we keep your address marked as unsubscribed, so it is never added back or written to again; it is deleted with the list.

Legal basis: for mailing lists, your consent, Art. 6(1)(a) GDPR, which you can withdraw at any time with the link in every message. For answers and for keeping track of what we sent, our legitimate interest in corresponding with you and showing what we sent, Art. 6(1)(f) GDPR.

12. The role of server teams

Technified provides the tools; each server's owner and staff decide how to use them in their community: whom to punish and why, what to ask in an application, what to publish. They see the data of their own server, and only that. If you have a question about a decision a server made about you, such as a ban or a declined application, the server's team is the right first contact. You can always exercise your data protection rights with us directly, see section 18.

13. Where data comes from

Data that you did not give us yourself comes from:

• Discord, through the bot, about the members, roles and ticket channels of servers that use Technified;
• Roblox, about public profiles, groups and items, and from connected games about who is playing;
• the staff of a server, for example when they issue a punishment or write a note.

14. Who receives data

• Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA) hosts the website, the API, the database and stored files, runs the bot's connection to Discord, and sends and receives our mail. Cloudflare processes data only on our behalf, under a data processing agreement according to Art. 28 GDPR.
• Discord Inc. (444 De Haro Street, Suite 200, San Francisco, CA 94107, USA) receives what the bot does in a server, such as giving roles, sending messages and carrying out bans. Discord is responsible for this itself; see Discord's privacy policy.
• Roblox Corporation (3150 South Delaware Street, San Mateo, CA 94403, USA) receives the requests Technified makes about Roblox accounts, groups and items, and handles signing in to Roblox. Roblox is responsible for this itself; see Roblox's privacy policy.
• The staff of a server see the data of that server, and of the servers in its organization where it is shared, as described in section 7.
• Authorities, only where we are legally obliged to, Art. 6(1)(c) GDPR.

We do not sell personal data, and we do not give it to anyone for advertising.

15. Transfers outside the EU

Cloudflare, Discord and Roblox are based in the United States, and data may be processed there. For Cloudflare, transfers rely on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework, in which Cloudflare takes part, and on standard contractual clauses in its data processing agreement, Art. 45 and 46(2)(c) GDPR. Discord and Roblox receive data as services in their own right, for the platforms the community already uses; they are responsible for their own transfers and safeguards, which their privacy policies describe.

16. How long data is kept

We keep data only as long as it is needed for its purpose. Most of it is deleted automatically, every night, on these schedules. A ban is kept as long as it applies, because otherwise deleting an account would be a way around it.

Where the law obliges us to keep data longer, we keep it for that period and use it for nothing else.

17. Cookies and storage on your device

Technified stores only what is strictly necessary for a service you asked for, so no consent is needed for it, § 25(2) No. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG). There are no tracking, analytics or advertising cookies.

18. Your rights

You have the right to:

• know whether and which data about you we process, and receive a copy (Art. 15 GDPR);
• have incorrect data corrected (Art. 16 GDPR);
• have your data deleted (Art. 17 GDPR);
• have processing restricted (Art. 18 GDPR);
• receive your data in a common, machine readable format (Art. 20 GDPR);
• withdraw a consent you gave, with effect for the future (Art. 7(3) GDPR);
• lodge a complaint with a supervisory authority (Art. 77 GDPR).

Do it yourself. Signed in, open Account, Privacy. There you can see what is held about you across every server, download it as a file, leave a single server (which removes your link, the roles given through it and your submissions there), and delete your account. Every request shows its progress, and you are told what will stay before anything is deleted.

What deletion keeps, and why. Deleting your account removes your profile, your account links, your server memberships, your sessions, your activity, the text of your applications and appeals, the files you uploaded with them, and your ticket messages. Some things stay, because they are someone else's record or because removing them would undo moderation: punishments that still apply, decisions about you (such as a declined application, without your text), the audit log, and saved ticket transcripts and ticket pictures, until they expire after 1 year. If you need something in a transcript or picture removed sooner, write to us.

Or write to us at support@technified.xyz. We answer within one month. Because we only know you by your Discord account, we may ask you to show that the account is yours before we act on a request.

Complaints. If you think we handle your data wrongly, please tell us first, so we can put it right. You can also complain to a data protection supervisory authority at any time, in particular in the EU country where you live, where you work, or where you think the infringement happened.

19. Children

The dashboard is for people aged 13 or older, as Discord is. If you are under the age your country requires for using online services on your own, ask a parent or guardian first. Roblox games are played by younger children too. If a child is moderated in a game that uses Technified, we process only the Roblox ID, name and the moderation record. If you believe we hold data about a child that we should not, write to us and we will delete it.

20. Automated decisions

Some things happen automatically, according to rules a server's team sets up: roles are given or removed based on your Roblox account, Discord's AutoMod can trigger actions, a punishment can expire, and a staff member who misses a quota can receive a strike. These are moderation of a community within Discord and Roblox and have no legal effect on you. They are not automated decisions within the meaning of Art. 22 GDPR, and the server's team can review and change each of them.

21. Security

All connections are encrypted (TLS). Sign in tokens are stored only as hashes, Roblox credentials that servers store are encrypted, evidence files are private and every view of them is recorded, and access within a server follows the permissions its owner set. Nobody can rule out every risk, but we work to keep your data safe.

22. Changes to this policy

We change this policy when Technified changes or the law requires it. The date at the top shows the last change. If a change affects you significantly, we tell you in the dashboard before it applies.