Privacy Statement

1. Purpose

This application supports membership and administration for The Unforgiven, a fictional Roblox role-play / milsim community. It uses Roblox OAuth to authenticate users and links authenticated accounts to community records.

2. Account and personal information collected

The application collects only the account and contact information needed to identify members and operate the community system:

• Roblox User ID, username, display name, profile link and profile picture supplied through Roblox OAuth;
• Discord username and Discord user ID;
• the UTC offset you select for timezone coordination.

The application does not ask for, receive, or store your Roblox password. Roblox authentication takes place through Roblox's OAuth service.

3. Fictional Legion and character data

Important: lore names, characters, ranks, units, Orders, squads, operations, fictional deaths, attendance, points, awards, qualifications, service history, relics and similar Legion records are fictional community / role-play data. They do not represent real-world employment, military service, qualifications, honours, medical information, criminal history, or other real-world facts about a person.

These fictional records are linked internally to a member's authenticated account so the community can administer gameplay, membership and progression. They are not intended to describe your real identity outside the community.

4. How information is used

Account information is used only to:

• authenticate a Roblox account and associate it with the correct community record;
• support Legacy data transfer and new-member intake;
• administer community membership, permissions and fictional records;
• coordinate timezone-dependent community activity;
• check Roblox group membership through Roblox's public services, so administrators can see whether members are in the community's groups;
• prevent duplicate, fraudulent or abusive submissions;
• maintain security, audit and administrative records for this community system.

Information obtained through Roblox is not sold, used for advertising, or used to train artificial-intelligence or language models.

5. Where information is stored

The website and its database run on Cloudflare (Cloudflare Workers and the Cloudflare D1 database). During the move from the earlier Google Apps Script version, community records may also be kept in Google Sheets workbooks maintained by administrators and imported into the site.

Administrators who import data can download a backup copy of the database, which is kept on their own device so an import can be undone.

6. Who can see your information

• Members who are signed in can see community records such as lore names, ranks, units, operations and attendance.
• Administrators see the records their assigned role needs. Discord IDs and Roblox IDs are shown only to the Owner and Admin roles.
• The public: if the community turns on the public roster, anyone can see Roblox usernames, lore names, ranks, positions and units. Points, leave status, Discord IDs and Roblox IDs are never shown publicly.
• Discord: if Discord integration is enabled, operation summaries and a list of members currently on the site may be posted in the community's Discord server.

Account-identifying information is not intentionally shared with unrelated third parties.

7. Technical information and your browser

• Sign-in: signing in creates a session that lasts up to 6 hours. A random session token is kept in your browser's storage so that your open tabs stay signed in; the server stores only a scrambled (hashed) form of it. Signing out ends the session in every tab.
• Browser storage: the site also stores small settings in your browser, such as the time of your last activity (used for the automatic sign-out after inactivity). It does not use advertising or tracking cookies.
• Connection information: your IP address is used briefly to limit excessive requests. Cloudflare processes connection data to deliver and protect the site, and keeps short-term technical logs to diagnose errors.
• Activity: while you use the site, it records that you are online for up to 10 minutes. Administrative actions are recorded in an audit log.
• No third-party trackers: the pages load no analytics, advertising or tracking services. Fonts and page code are served from the site itself; profile pictures are loaded from Roblox.

8. Retention and corrections

Community records may be retained while they are required for membership, record continuity, security, audit, or community administration. Sign-in sessions end after 6 hours. Members may ask authorised administrators to correct inaccurate account or contact information or fictional community records.

Requests concerning correction, access or deletion should be directed to The Unforgiven administration team through the community's official Discord channels.

9. Security

Reasonable technical and administrative measures are used to protect the system, including Roblox OAuth sign-in with PKCE, role-based administrative access, server-side permission checks and validation, limits on excessive requests, encrypted (HTTPS-only) connections, and restricted database access. No internet-connected system can guarantee absolute security.

10. Roblox and Cloudflare

Roblox is used as an authentication provider. Cloudflare hosts the website and its database. This application is a third-party community application and is not operated by Roblox or Cloudflare. Their own privacy practices are governed by their respective policies.

11. Changes to this statement

This statement may be updated if the application begins collecting new account information, adds new integrations, or changes how information is used. Material changes will be reflected on this page.