Privacy Policy

Effective 19 October 2026 · Applies to the PFF Discord bot, the verification service at bot.project-orbis.xyz, the Roblox experience Project Orbis and project-orbis.xyz.

This policy explains what data we collect when you use the PFF Discord bot ("the Bot"), link your Roblox account, or play Project Orbis ("the Game"), why we collect it, and the choices you have. We only collect what we need to run the league, the Game and its Discord community.

1. Data we collect

Source	Data
Discord	Your Discord user ID, username and server roles; the number of messages you send (not their content); slash command usage; content you submit through commands (feedback, transfer demand reasons, free agent posts); messages written inside support or purchase tickets.
Roblox verification	When you press Verify and sign in with Roblox, we receive your Roblox user ID and username through Roblox's official OAuth (scopes `openid` and `profile`). We never see your Roblox password.
The Game	Your Roblox user ID, username and display name; in-game progress and settings needed for your profile (Orbis balance, time played, rank, region shown in the Game, first join date, daily streak, pitches hosted, owned and equipped cosmetics, gameplay statistics); which server you are in and when; match results you appear in; in-game moderation history; Robux purchase receipts (product and transaction IDs, never payment details).
Moderation	Warnings, timeouts, kicks, bans, automod detections and the reason recorded by staff.
Technical	Server logs with timestamps and error details, used for security and debugging.

2. How we use it

Linking your Discord and Roblox accounts, giving you the verified role and syncing your nickname.
Showing your profile card, leaderboards, club rosters, transfers and match results.
Applying actions you or staff request across Discord and the Game (for example Orbis adjustments, store purchases, bans).
Running support tickets, including an optional AI assistant (see section 4).
Keeping the community safe: moderation, anti-spam, anti-cheat and audit logs.

We do not sell your data and do not use it for advertising.

3. What is public

Your Roblox username, display name, Orbis balance, time played, rank, equipped cosmetics, collection counts, match appearances and leaderboard position may be shown publicly in Discord (for example through /profile and /leaderboard) and on project-orbis.xyz. Your Discord ID, messages, tickets and moderation history are never shown publicly.

4. Service providers

Discord and Roblox: platforms the Bot and the Game run on.
Supabase: database hosting.
Railway: hosting for the Bot.
Vercel: hosting for project-orbis.xyz.
Groq: AI processing. Only when you mention the Bot inside a ticket, or submit a transfer demand, the relevant text is sent to Groq to generate an answer or a screening suggestion. Staff always make the final decision on demands.

5. Retention

Account links and league data: kept while your account is active, or until you ask us to delete them.
In-game event history (joins, Orbis changes, item unlocks): automatically deleted after 45 days.
Server logs: kept only for a short period for security and debugging, then deleted.
AI ticket context: deleted when the ticket closes. A text transcript of closed tickets is kept in a private staff channel.
Moderation records: kept as long as needed to enforce the rules.

6. Your choices and rights

You can unlink your Roblox account at any time by opening a ticket; staff can remove the link with /link remove.
You can ask for a copy of your data, a correction, or deletion by opening a ticket in our Discord server. We answer within 30 days. Some records (for example active bans) may be kept where needed for safety.
If you live in the EEA or UK you also have the right to object to processing and to complain to your data protection authority.

7. Security

Data is stored in a database with row level security and is only reachable by the Bot. The link between the Game and the Bot is encrypted (HTTPS) and authenticated with a secret key. Verification uses single-use, short-lived sign-in links. No method is perfect, but we work to protect your data.

8. Children

Discord requires users to be at least 13 (or older where local law requires). Roblox allows younger players; for those players we only process the in-game data described above, which is needed to provide the Game. Parents or guardians can contact us through a ticket to review or delete a child's data.

9. Changes

We may update this policy. The effective date above shows the latest version. Significant changes are announced in our Discord server.

10. Contact

Open a support ticket in the PFF Discord server, or reach us through project-orbis.xyz.