This Privacy Policy explains what information the Matter Services verification services collect when you verify your Discord and Roblox identities, and how that information is used.
1. Information We Collect
- Discord account ID, username, display name, and avatar, obtained through the official Discord OAuth flow. We request only the
identify scope.
- Roblox account ID, username, display name, and avatar, obtained through the official Roblox OAuth flow.
- Verification session data: hashed session/bootstrap state, OAuth state values (hashed), timestamps, and current verification progress. We do not persist raw session tokens or PKCE verifiers.
- A permanent binding record linking your Discord ID to a Roblox ID once verification is complete.
2. How We Use Information
- To authenticate your identity against Discord and Roblox.
- To create and maintain a one-to-one verified link between your Discord and Roblox accounts.
- To grant and synchronize in-experiment community roles and nicknames associated with that link.
3. Information We Do Not Collect
- Your Roblox password. We never request, receive, or store Roblox credentials.
- Your Discord OAuth access token beyond the duration of the request that exchanges it for identity data.
- Full Discord guild membership rosters or message content.
4. Third Parties
Identity is verified through Discord and Roblox, each governed by their own privacy policies. We retain only the minimum identifiers necessary to maintain your verified binding.
5. Data Retention
Permanent bindings are retained for as long as needed to maintain your verified identity and roles. Temporary verification session data is deleted automatically once it is no longer needed or when it expires.
6. Contact
If you have questions about this Privacy Policy, contact the Matter Services team.