Privacy Policy

Last Updated: January 10, 2026

← Back to Home

1. Introduction

This Privacy Policy describes how the Roblox Bot Control Panel ("we", "our", or "Service") collects, uses, and shares your personal information when you use our Service.

2. Information We Collect

2.1 Discord Account Information

When you authenticate via Discord OAuth2, we collect:

  • Discord User ID
  • Discord Username and Discriminator
  • Discord Avatar
  • Email address (if provided by Discord)

2.2 Roblox Account Information

You may voluntarily provide:

  • Roblox User IDs
  • Roblox Usernames
  • Roblox Display Names

2.3 Hardware Identification (HWID)

We collect and store hardware identification tokens (HWIDs) that you link to your account for bot authorization purposes.

2.4 Bot Activity Data

We collect information about your bot activities, including:

  • Bot registration timestamps
  • Bot status (online/offline)
  • Last ping timestamps
  • Command execution history
  • Bot metadata (client version, game IDs, place IDs)

2.5 Usage Data

We automatically collect:

  • IP addresses
  • Browser type and version
  • Access timestamps
  • Pages visited
  • API request logs

3. How We Use Your Information

We use the collected information for:

  • Providing and maintaining the Service
  • Authenticating users via Discord OAuth2
  • Managing bot registrations and authorizations
  • Processing and executing bot commands
  • Monitoring Service usage and detecting abuse
  • Improving and optimizing the Service
  • Enforcing rate limits and security measures
  • Communicating with you about the Service

4. Data Storage and Security

We store your data in MongoDB databases with the following security measures:

  • Encrypted connections (TLS/SSL)
  • Session-based authentication with HTTP-only cookies
  • HWID-based authorization for bot operations
  • Rate limiting to prevent abuse
  • Regular security updates and monitoring

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee its absolute security.

5. Data Retention

We retain your data as follows:

  • User Account Data: Retained until you delete your account
  • Bot Data: Retained until you delete the bot or your account
  • Command History: Automatically deleted after 5 minutes (TTL index)
  • Session Data: Expires after 7 days of inactivity
  • Logs: Retained for up to 30 days for security and debugging purposes

6. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

  • With Your Consent: When you explicitly authorize us to share specific information
  • Legal Requirements: When required by law, court order, or government regulation
  • Service Protection: To protect the rights, property, or safety of the Service, our users, or the public
  • Business Transfers: In connection with a merger, acquisition, or sale of assets

7. Third-Party Services

The Service integrates with the following third-party services:

  • Discord: For OAuth2 authentication (governed by Discord's Privacy Policy)
  • MongoDB Atlas: For database hosting (governed by MongoDB's Privacy Policy)

We are not responsible for the privacy practices of these third-party services.

8. Cookies and Tracking

We use cookies and similar tracking technologies to:

  • Maintain user sessions
  • Remember user preferences
  • Analyze Service usage

Our session cookies are HTTP-only and secure (in production), preventing client-side JavaScript access and ensuring transmission only over HTTPS.

9. Your Rights and Choices

You have the right to:

  • Access: Request a copy of your personal data
  • Correction: Update or correct your information through the Settings page
  • Deletion: Delete your bots, unlink HWIDs, or request account deletion
  • Data Portability: Request your data in a machine-readable format
  • Opt-Out: Stop using the Service at any time

To exercise these rights, please contact us through our support channels.

10. Children's Privacy

The Service is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

11. International Data Transfers

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. By using the Service, you consent to such transfers.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

13. Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you within 72 hours of becoming aware of the breach, in accordance with applicable data protection laws.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us through:

  • Our GitHub repository
  • Support channels provided in the Service

15. Consent

By using the Service, you consent to the collection, use, and storage of your information as described in this Privacy Policy.