01
Who this policy covers
This policy applies to Hardline Labs websites and services, including Hardline Aegis and its Discord and Roblox integrations. A game operator may separately control information collected in their Roblox experience and is responsible for their own notices and legal obligations.
02
Information we process
Depending on the features used, we process:
- Roblox account or resource-owner IDs, authorized Universe IDs, granted scopes, encrypted OAuth tokens, and connection times.
- Discord server, user, channel, role, and message identifiers; optional Discord-to-Roblox staff account links.
- Aegis incidents such as player UserId and username, server job ID, rule, severity, summary, time, case status, moderator reason, action, and Roblox result code.
- Installation identifiers, hashed connection secrets, audit records, and basic service diagnostics.
- Standard website and network logs that our hosting and security providers may process, such as IP address, user agent, requested URL, and timestamp.
We do not receive your Roblox or Discord password. Aegis OAuth requests only identity confirmation and permission to publish a message to the Roblox experience you select.
03
How we use information
We use information to connect the correct game and Discord server, deliver private incident cards, verify staff authority, route and record requested moderation actions, secure the service, troubleshoot failures, prevent abuse, and improve Aegis. We do not sell personal information or use incident data for advertising.
04
When information is shared
Information is sent to Roblox and Discord only as needed to provide the features a game operator enables. Infrastructure providers, including hosting, network-security, and storage providers, may process limited information on our behalf. We may disclose information when required by law or necessary to protect users, the service, or others. We do not provide incident records to data brokers.
05
Retention and deletion
OAuth grants remain until they expire, are replaced, or the game is disconnected. Installation, account-link, incident, action, and audit records remain while the integration is active or while reasonably needed for security and support. Discord server owners can use Hardline's disconnect or cleanup commands to remove installation-scoped records and revoke the related Roblox grant. You may also request access or deletion by emailing hardlinelabsbusiness@gmail.com. We may retain limited records when required for security, legal compliance, or dispute resolution.
06
Security
We use installation-scoped credentials, least-privilege Roblox permissions, encrypted OAuth tokens, hashed bridge secrets, short-lived action requests, and restricted Discord channels. No system is perfectly secure; report suspected credential or data exposure privately through our contact page.
07
Young users
Roblox requires an eligible account to authorize OAuth apps. Aegis may process limited security events about players in an operator's experience, including younger players, solely to provide the operator's security and moderation features. Game operators are responsible for configuring Aegis appropriately and meeting laws that apply to their audience. Parents or guardians may contact us about a data request.
08
Changes and contact
We may update this policy as Aegis changes. The effective date at the top identifies the current version. Questions, privacy requests, and complaints can be sent to hardlinelabsbusiness@gmail.com.