Privacy Policy

This policy describes the data used by the Bloxpro Discord bot and its web pages.

Data and purposes

• Discord IDs of users and servers support settings, economy balances, inventories, cooldowns, transaction records, command access and notification preferences.
• Roblox usernames and IDs are used for checks you request, configured accounts and staff-managed account links. Transfer amounts and dates you give to Plus are used for tracking and reminders. Screenshots you submit for import are processed to extract those records.
• Tickets: your form answers, ticket messages, claim and close details, optional star rating, and a transcript of the ticket.
• Purchase logs: buyer, seller, amount, date and the price if given. If a log is removed by mistake, an audit copy of the removal is kept.
• Payout group checks: the list of server groups you last saw, so your next check can show what is new.
• Verification: to stop alt accounts, verification keeps keyed one-way hashes of anti-abuse signals. Raw IP addresses are not stored. These records expire 180 days after your last check.

Optional Roblox OAuth linking

Using /link is optional. Roblox handles sign-in on its own website, so never send your Roblox password or login cookie to the bot. Linking requests only the openid and profile scopes.

After you confirm the account in Discord, the bot stores your Discord ID, Roblox user ID, Roblox username and the verification time. Pending link requests hold a hashed random state, a PKCE verifier, an expiry and the candidate Roblox identity; they expire after 10 minutes. Roblox access tokens are used for the identity lookup only, are not saved, and are revoked after use.

Transcripts and dashboard sign-in

• Closed ticket transcripts are stored so they can be viewed online. A transcript opens only for the person who opened the ticket and for staff, after signing in with Discord.
• Signing in uses Discord OAuth with the identify scope only. The site sets one signed session cookie for up to 7 days and stores nothing else in your browser.

Services and disclosure

The bot uses Discord and Roblox to provide its features, SparkedHost to run the bot, Cloudflare and ngrok to serve its web pages, and a hosted database. These providers process the information needed to deliver the service, and web infrastructure may process connection details such as IP addresses and request metadata. Their own privacy policies also apply. We do not sell or trade user data.

Anything posted or shared in a Discord channel is visible to people who can see that channel. Private replies are meant only for the person who used the command. Avoid putting sensitive information in screenshots, tickets or public commands.

Retention and deletion

• Records are kept for as long as needed to provide the related features. Transcripts and purchase logs are kept as records of completed tickets and sales.
• Use /link action:unlink to delete your Roblox link and any pending link request. This does not remove staff-managed links, economy records or transfer history, and does not remove the app from your Roblox account settings.
• Use /toggledms to stop bot DMs at any time.
• For other deletion requests or privacy questions, open a ticket or contact Bloxpro staff in the server. Never include passwords, cookies or API tokens in a request.