privacy
updated 10 november 2026
what is stored
when you run /link and sign in with roblox, the bot stores:
- your discord user id
- your roblox user id and username
- a roblox refresh token, encrypted
- how many badges on the list you own
- when the link was last updated
what is kept briefly
- which listed badges you own, for 5 minutes, so repeat commands are fast
- sign-in state while you link, for 10 minutes
what is read and not stored
the bot reads your roblox display name and avatar headshot from your public profile when a command shows them. roblox access tokens are used for one request and discarded.
what it is used for
running the bot's commands in discord, which show your badges and rank linked players by badges owned. results are posted where a command is run, and other people can look you up while you are linked.
who gets it
nothing is sold or shared for advertising. the bot runs on cloudflare, replies through discord, and asks roblox for your profile and badge ownership.
how long
until you unlink. a link that roblox no longer accepts is deleted the next time it is checked.
deleting your data
run /unlink. it revokes the bot's access at roblox and deletes everything stored about you. the 5 minute badge cache expires on its own.