Privacy Policy
Effective date: August 24, 2026
This policy explains how Paradox of Eternity Bot (the “Service”), operated by the independent developer who publishes the Discord application (the “Operator”), handles information when you use its Discord commands or Roblox account-linking feature.
Information we process
When you use a command, Discord provides your Discord user ID and the command information needed to answer it. Discord may also provide the server or channel context in which the command was used.
For restricted administration commands, the Service may retain the requesting and approving Discord user IDs, target Roblox user ID, action summary, result, and timestamp in a limited audit history. Pending confirmations expire after 10 minutes. The history is used to review and undo authorized changes and is limited to the 50 most recent entries for each target player.
If you choose to link a Roblox account, the Service requests only the Roblox OAuth openid and profile scopes. Roblox provides your numeric Roblox user ID and public profile fields that can include your username, display name, profile URL, and avatar URL. Those fields may be received briefly while verifying your identity, but the Service stores only your Discord user ID, Roblox user ID, Roblox username, and the time the link was completed.
While sign-in is in progress, the Service temporarily stores a random OAuth state value, a PKCE verifier, the approved redirect URL, and an expiration time. Limited security and diagnostic logs may also be processed when an error occurs.
The Service does not ask for or collect your Roblox password or .ROBLOSECURITY cookie.
How we use information
Information is used only to operate requested bot features, link the two accounts, show you which account is linked, check your current Roblox group role before restricted commands, prevent abuse, troubleshoot errors, and protect the Service.
The Service does not track you across Roblox experiences, create advertising profiles, or use personal information to train artificial-intelligence or machine-learning models.
OAuth tokens
A Roblox OAuth access token is used only long enough to request your identity from Roblox. Access and refresh tokens are not stored after account linking is completed.
Storage and sharing
The Service is hosted on Cloudflare and communicates with Discord and Roblox. Those providers process information only as necessary to provide hosting, Discord interactions, and Roblox sign-in under their own policies.
We do not sell personal information, use it for advertising, share it with unrelated third parties, or disclose Roblox-identifying information to other users. Information may be disclosed only when required by law or reasonably necessary to protect users, the Service, or platform security.
Retention and deletion
Account-link information is kept until you unlink it or it is no longer needed to provide the Service. Incomplete OAuth information expires and is deleted after 10 minutes. Limited operational logs are retained only as reasonably necessary for security and troubleshooting.
Administrative history is kept while reasonably needed to operate, secure, and audit the private development tool. An optional private Discord audit channel may also receive a copy of successful administrative action summaries.
Run /unlinkroblox anywhere the Discord application is available to delete your stored account link and any pending login information. You do not need access to the private development server. You may then use /robloxaccount to confirm that no account remains linked.
If the Service loses permission to use Roblox API data or is discontinued, the Operator will delete the Roblox account-link information that is no longer permitted or needed.
Security
The Service uses Discord request-signature verification, random single-use OAuth state, PKCE, HTTPS, restricted Cloudflare storage, and least-privilege OAuth scopes. No internet service can guarantee absolute security, so users should report suspected misuse through the Discord context where they accessed the application.
Age requirement
Roblox account linking is intended only for users eligible to authorize Roblox OAuth applications and use Discord under those platforms’ terms. Where required, a parent or legal guardian must provide permission.
Your choices
Account linking is optional. If you do not authorize Roblox OAuth, the Service does not receive the Roblox account information described above, although features that require a linked account will not work.
Changes
This policy may be updated as the Service changes. The effective date above will be updated when material changes are made.
Contact
For privacy questions or suspected misuse, contact the Operator through the Discord application profile or the Discord context in which you accessed the Service. Account-link deletion is available directly through /unlinkroblox.