Privacy Policy

This Privacy Policy explains what information Viridia RP ("we", "us") collects through the website at viridiarp.com, our Discord bot and our game server, and how we use it. Viridia RP is a community project run by volunteer staff. It is not a registered company. We do not sell your information and we do not use advertising or tracking cookies.

The Services are only for people aged 18 and over. We don't knowingly collect information from anyone younger. If you think a minor has given us information, open a ticket and we'll delete it.

1. Information we collect

When you log in with Discord. We only ask Discord for basic profile access (the "identify" permission). We receive and store:

• your Discord user ID, username, display name and avatar;
• when you first logged in, when you last logged in and when you last logged out.

We do not receive your email address, your password or your Discord messages.

When you apply. We store your application answers, when you submitted them, and the staff decision. That includes who decided, any reason they gave, and any reapply cooldown.

Vouches. If someone vouches for you with the /vouch command, we store who vouched, who was vouched for, the reason they wrote, timestamps and the outcome.

Your roles in our Discord servers. Our bot looks up whether you're in our Discord servers, when you joined, and which roles you have. We use this to:

• recognise roles that mean you're already whitelisted (for example Passport);
• show your active subscriptions;
• check you've joined the servers an application requires;
• apply bans that are given through a Discord role.

Staff actions. If staff ban you, whitelist you or revoke an approval, we store who did it, when, and the reason.

Purchases. Payments are handled by Tebex. We never see or store your card or bank details. Tebex shares what's needed to deliver your purchase, such as your username and the items bought. The Tebex privacy policy explains how Tebex handles your data.

Technical information. Our site runs behind Cloudflare, which handles every visit to protect the site from attacks. As part of this, Cloudflare processes your IP address and basic browser details. Our server may keep short-lived technical logs for security and troubleshooting.

2. Cookies

We only use cookies that are needed for the site to work:

• vrp_session keeps you logged in, for up to 30 days. It's signed so it can't be tampered with.
• vrp_oauth_state and vrp_oauth_next are used for up to 10 minutes while you log in with Discord, to protect the login and send you back to the right page.
• vrp_banned is only set if a banned account tries to log in, so we can show the reason. It lasts 1 hour.
• Cloudflare security cookies help block bots and attacks.

Your browser also saves your store cart on your own device, so it's still there when you come back. Staff using the admin panel may have small preferences saved in their browser too, such as which sections are expanded. We don't use analytics, advertising or social-media tracking cookies.

3. How we use your information

We use it to:

• log you in and show your profile, applications, whitelist status and subscriptions;
• review applications and vouches, and send you Discord messages about decisions;
• give and remove Discord roles connected to approvals and vouches;
• enforce our Terms and Server Rules, including bans;
• keep the Services secure and running.

4. Who can see it

• Staff: our staff and admins can see member and application information in the website's admin panel, as far as their staff permissions allow.
• Discord staff channels: when you submit an application or are vouched for, the details are posted for review in a private staff channel or thread in our Discord. Discord's own privacy policy covers anything stored on Discord.
• Service providers: Cloudflare (security and delivery), our server host, Discord (login and bot) and Tebex (payments) process data so the Services can run.
• Legal reasons: we may share information if the law requires it, or to protect the safety of our community.

We never sell or rent your information.

5. How long we keep it

We keep your information for as long as the community runs, or until you ask us to delete it. We may keep the minimum needed to enforce bans and prevent abuse, such as your Discord ID and ban reason, even after a deletion request. Application threads in Discord stay until they're deleted there.

6. Your choices and rights

You can ask us to:

• show you the information we hold about you;
• correct it;
• delete it, except what we keep to enforce bans or that the law requires us to keep. Deleting your applications or whitelist record may mean you need to apply again.

To make a request, open a support ticket in our Discord: https://discord.gg/viridiarp. We may ask you to confirm it's really you, for example by opening the ticket from the same Discord account. Depending on where you live, for example in California or the EU/UK, you may have other privacy rights. We'll honour requests as those laws require.

You can also remove our website's access to your Discord account at any time. In Discord, go to User Settings → Authorized Apps.

7. Security

We use HTTPS, signed login cookies, access permissions for staff, and Cloudflare protection. No system is perfectly secure, but we work to protect your information.

8. Where your data is stored

Our servers and service providers are mainly in the United States. By using the Services you understand your information will be processed there.

9. Changes

We may update this policy. The "Last updated" date at the top shows when it last changed.

10. Contact

For questions or requests, open a support ticket in our Discord: https://discord.gg/viridiarp