Privacy Policy

This Privacy Policy explains how Vesteria, Inc., a Delaware corporation ("Vesteria," "we," "us," or "our"), handles information for the Vesteria authentication service at auth.playvesteria.com and the Discord verification service at verify.playvesteria.com.

Information We Process

When you sign in through Roblox, we may receive and process Roblox identity information such as your Roblox user ID, username or display name, profile URL, and avatar or profile image. This service does not expect Roblox to provide your email address for this authentication flow.

Account Records

We may keep a minimal authentication account record for users who sign in through this service. This record may include your Roblox user ID, OIDC subject, current Roblox username or display name, avatar or profile image, a verified email address and forum activity snapshot supplied by the Vesteria forum, Vesteria staff or content creator status, first and most recent sign-in timestamps, sign-in count, and the Vesteria service used for the most recent sign-in.

Linked Accounts

When you link another account to Vesteria Auth, including Discord, we may store linked account identifiers and display information so Vesteria services can connect your verified Roblox identity to those accounts. We do not use linked account records to store Roblox OAuth tokens, Open Cloud keys, or client secrets.

Discord Verification and Server Member Data

If you use Vesteria Discord verification, we may process Discord account information such as your Discord user ID, username, display name, avatar, server membership status, roles, and nickname. We use this information to connect your Discord account to your verified Roblox/Vesteria identity, confirm membership in official Vesteria Discord servers, assign or remove verification-related roles, update nicknames to Roblox usernames where configured, and maintain verification audit logs.

For official Vesteria Discord servers, our Discord bot may receive server member join events so that already-verified users can automatically receive the correct roles when they join a configured Vesteria server. We do not use Discord member data to sell, advertise to, or profile users outside of Vesteria verification, access control, moderation support, security, and role synchronization.

Forum Email Verification

If the Vesteria forum asks for your email address, that email collection and verification is handled through the forum sign-on and account flow, not through Roblox Open Cloud OAuth. After verification, the forum may send the verified address to this authentication service so it can be associated with your Vesteria Auth profile.

The Vesteria forum may also send limited forum activity counts to this service, such as post count, comment count, and whether you have made a Vesteria database comment. These values are used for Vesteria account, profile, entitlement, or access features.

How We Use Information

We use authentication information to verify your identity, connect your Roblox identity to Vesteria community services, protect access to the forum, and support future Vesteria account or entitlement features.

Vesteria Game Data

We may use Roblox identity information collected through this service to cross-reference Vesteria game datastores and obtain in-game information about you. This may include Vesteria game stats, inventory, guild information, progression, entitlements, or similar Vesteria gameplay and account data.

Logs and Security

We may collect operational logs such as request paths, response status codes, timestamps, and request identifiers to monitor reliability and security. We avoid intentionally logging secrets or raw OAuth tokens.

Sharing

We may share identity assertions or limited profile claims with Vesteria services, including the forum, to complete sign-in. We may also disclose information if required by law or needed to protect Vesteria, our users, or our services.

If you choose to connect a third-party service to Vesteria Auth, we may share the information you authorize or that is reasonably needed for that integration, such as identity claims or Vesteria account/game data. Information handled by that third-party service is subject to that service's own privacy policy and practices.

When syncing Discord verification, we may send role, nickname, and verification status updates back to Discord through Discord's API, and may post verification audit messages in configured private or staff-accessible Discord logging channels.

Retention

Authentication account records, linked account records, sign-in records, and operational logs are retained as long as reasonably needed for service operation, security, debugging, product features, or legal compliance. Short-lived OAuth codes and access tokens are designed to expire quickly.

Discord verification records and audit logs are retained as long as reasonably needed to operate verification, sync roles, investigate issues, protect the service, or comply with legal obligations.

Changes

We may update this Privacy Policy from time to time. Meaningful changes are tracked in the Vesteria Auth Privacy Policy changelog at https://forum.playvesteria.com/t/vesteria-auth-privacy-policy-changelog/1669. The "Last updated" date reflects the latest version published by this service.

Contact

Questions about this Privacy Policy may be directed to Vesteria, Inc. through the official Vesteria community or support channels.

For deletion requests or other data requests, you may file a support ticket through the official Vesteria Support Discord at https://discord.gg/FVbTze5yjC. Deleting your data may interrupt your access to Vesteria Auth, Vesteria Discord verification, linked services, or other Vesteria services that depend on that data.