Privacy Policy

Verifying links your Discord account to your Roblox account. You sign in to each one with its own official login page, and we never see your password for either.

• From Discord (the identify scope): your Discord user ID and username. We don't request your email, your servers, or your messages.
• From Roblox (the openid profile scopes): your Roblox user ID, username and display name. Roblox may also send your profile link and avatar picture, but we don't store them. We don't request any other Roblox permissions, so we can't see your email, friends, inventory or Robux, and we can't do anything on your behalf.
• When it happened: the time you last verified.

The sign-in tokens Discord and Roblox give us are used once, to read the details above, and are then thrown away. We don't keep tokens or refresh tokens, so we have no ongoing access to either account.

• Your rank and role in the Canela Creamery Roblox group (ID 6246067), read from Roblox's public group records each time your roles are synced.
• Whether you're a member of the Canela Creamery Discord server, so we can give you roles there.

When you play our Roblox game, it reports to our servers. This happens whether or not you verify. Verifying links this information to your Discord account.

• Your Roblox user ID, username, display name, and group rank and role.
• When you join and leave, and which game server you were in.
• For staff: when you clock in and out, and your job progress (Job Level, XP, orders served, star rating and streak).
• Promotions, Golden Hour shift attendance and hosting, and actions taken with in-game staff tools.

• To give you the Discord roles that match your group rank, and set your server nickname to your Roblox username.
• To show live game status in Discord, such as who's on shift and which servers need staff.
• To show your profile card (rank, Job Level, XP, hours worked, orders, rating and streak) when you or another server member uses /profile.
• To announce promotions in the server, mentioning you if your accounts are linked.
• To send Discord DMs about your promotions and Golden Hour shifts you've shown interest in or are hosting. You can turn shift DMs off with /settings.
• To keep a staff-only log of each verification, including roles changed and any account switch, so staff can spot mistakes and misuse.

We don't sell your information, share it with advertisers, or use it for anything other than running Canela Creamery. The site has no analytics or advertising trackers.

• Members of our Discord server can see your roles, your nickname, promotion announcements, your name on the live status while you're on shift, and your profile card.
• Canela Creamery staff and management can see the verification log, shift records and in-game staff action logs.
• The services we run on process data only to provide those services: Vercel (this website), Neon (our database), the server that runs our API and bot, and Discord and Roblox themselves.

The verification flow uses a few cookies to keep the steps secure and to remember your Discord sign-in between step 1 and step 2. They're signed so they can't be tampered with, and they expire after 10 to 30 minutes. We don't use advertising or analytics cookies.

We keep your account link and game records while they're useful for running the group, until you ask us to delete them. If you verify the same Roblox account from a different Discord account, the link moves to the new account.

When we delete your data, we remove the link and your stored records, and your linked roles stop being managed. Messages already posted in Discord, like promotion announcements, may stay in the channel history.

• Ask us to see, correct or delete your data by contacting Canela Creamery management in our Discord server (linked from the Canela Creamery Roblox group page).
• Turn off Golden Hour DMs with /settings, or close DMs from the server in Discord.
• Remove Canela Creamery from the connected apps in your Roblox or Discord account settings. We don't keep access to your accounts anyway, so this doesn't delete anything we've already stored. Ask us for that instead.

Many Roblox players are young. We only collect the information listed above, and none of it is used for advertising. You must meet Roblox's and Discord's own age requirements to use their sign-in. A parent or guardian can ask us to delete a child's data through our Discord server (linked from the Canela Creamery Roblox group page).

We'll update this policy when what we collect or how we use it changes, and update the date at the top.

Send questions about this policy, or requests about your data, to Canela Creamery management in our Discord server (linked from the Canela Creamery Roblox group page).