What is stored, and why

What this covers

Cyrannus Empire is a fan-made roleplay community project for a Roblox experience. This policy explains what the website at cyrannus.nexus stores about you, why, and how to get rid of it. It is run by an individual, not a company, and is not affiliated with or endorsed by Roblox Corporation or Discord Inc.

What is collected

You can read everything published to the open register without an account and without being asked for anything.

If you sign in with Roblox, the following is stored:

• 01Your Roblox user ID, username, display name and avatar image URL, as supplied by Roblox when you authorise sign-in.
• 02Your Discord user ID and username, but only if you choose to link Discord. This is optional and grants nothing on the site.
• 03Your rank and any divisions you are posted to, which are set by staff rather than by you.
• 04Promotions, commendations and moderation records relating to your account.
• 05Anything you write in a support ticket.
• 06For each sign-in: the IP address and browser user agent the session was created from, and its creation and expiry times.

What is not collected

No password is ever created or stored, because sign-in happens through Roblox. No email address is collected. No payment information is collected, because nothing is sold. There is no advertising, no analytics service, and no tracking across other websites.

Session cookies hold a random token and nothing else. The site stores only a one-way hash of that token, so the contents of the database cannot be used to impersonate you.

Why it is collected

The Roblox identity exists so that a website account provably belongs to a Roblox account. That is what allows the register to issue access by rank, and what allows moderation decisions taken here to be applied to the Roblox experience.

IP address and user agent are kept against each session so that a session can be recognised, expired and revoked. They are not used to profile you.

Where it is stored

Records are held in a PostgreSQL database hosted by Neon in the European Union (Frankfurt). The site itself is hosted by Vercel. Roblox and, if you link it, Discord receive a sign-in request from you directly; their own policies cover what they do with it.

No data is sold, rented, or shared with anyone for marketing. Nobody outside the project's staff has access to it.

How long it is kept

Sessions expire after 30 days and are deleted when you sign out. Account records, tickets and moderation history are kept while the account exists, because a moderation record with no history is not useful to anyone, including you when you appeal one.

If you ask for your account to be deleted it is removed, along with your tickets, promotions and commendations. Moderation records may be retained without your name attached where they are needed to enforce a ban, and the staff audit log records that an action happened.

Your choices

You can ask for a copy of everything held about you, ask for it to be corrected, or ask for it to be deleted. Open a ticket on the support page and it will be handled. If you are in the EU or UK you have these rights under the GDPR; they are offered here regardless of where you are.

Unlinking Discord removes your Discord ID and username. Signing out revokes that session immediately.

Younger members

Roblox communities include a lot of people under 18, and this one is no exception. That is the reason the site collects as little as it does: a Roblox ID, an optional Discord ID, and what you choose to write. No real name, no email, no address, no age.

If you are a parent or guardian and want an account and its records removed, open a ticket or contact the project through its community channels and it will be done without argument.

Changes

If what is collected changes, this page changes in the same update. The date at the top is the last substantive change, not the last time the site was deployed.