Privacy Policy

This Privacy Policy explains how Vesteria, Inc., a Delaware corporation ("Vesteria," "we," "us," or "our"), handles information for the Vesteria authentication service at auth.playvesteria.com.

Information We Process

When you sign in through Roblox, we may receive and process Roblox identity information such as your Roblox user ID, username or display name, profile URL, and avatar or profile image. This service does not expect Roblox to provide your email address for this authentication flow.

Forum Email Verification

If the Vesteria forum asks for your email address, that email collection and verification is handled through the forum sign-on and account flow, not through Roblox Open Cloud OAuth.

How We Use Information

We use authentication information to verify your identity, connect your Roblox identity to Vesteria community services, protect access to the forum, and support future Vesteria account or entitlement features.

Vesteria Game Data

We may use Roblox identity information collected through this service to cross-reference Vesteria game datastores and obtain in-game information about you. This may include Vesteria game stats, inventory, guild information, progression, entitlements, or similar Vesteria gameplay and account data.

Secrets and Credentials

Roblox/Open Cloud credentials are stored by this authentication service and are not intended to be stored in Discourse. We do not expose Roblox client secrets to the browser or to Discourse.

Logs and Security

We may collect operational logs such as request paths, response status codes, timestamps, and request identifiers to monitor reliability and security. We avoid intentionally logging secrets or raw OAuth tokens.

Sharing

We may share identity assertions or limited profile claims with Vesteria services, including the forum, to complete sign-in. We may also disclose information if required by law or needed to protect Vesteria, our users, or our services.

Retention

Authentication records and operational logs are retained only as long as reasonably needed for service operation, security, debugging, or legal compliance. Short-lived OAuth codes and access tokens are designed to expire quickly.

Changes

We may update this Privacy Policy at any time without notice. The "Last updated" date reflects the latest version published by this service.

Contact

Questions about this Privacy Policy may be directed to Vesteria, Inc. through the official Vesteria community or support channels.