Privacy Policy

Last updated: July 16, 2026

1. Introduction

Stryx Development (“we”, “our”, “us”) provides commission-based development services for communities, including Discord bots, web platforms, automation tools, and the Stryx Arcade game site. This Privacy Policy explains how we collect, use, store, and protect your information when you interact with our website, Discord services, Roblox OAuth integrations, Stryx Arcade, and paid transactions. Where applicable, we process personal data in accordance with the European Union General Data Protection Regulation (GDPR), the United Kingdom GDPR, and other applicable privacy and electronic communications laws.

2. Information We Collect

We collect information in the following categories:

2.1. Roblox OAuth 2.0 (openid & profile)

When you authenticate using Roblox OAuth, we collect only the information permitted by the scopes openid and profile, including:

  • Your Roblox user ID
  • Public profile information
  • Verification tokens associated with the OAuth session

2.2. Discord OAuth Login

When you sign in or connect your account using Discord OAuth, we request Discord's identify and email scopes. This may include:

  • Your Discord user ID
  • Your Discord username and display name
  • Your Discord avatar URL
  • Your Discord account email address and whether Discord reports it as verified
  • The date and time your Discord account was linked or refreshed

2.3. Discord Server Verification

When you use Stryx to verify membership in a Discord server, we use Discord OAuth to confirm that the Discord account belongs to the member who requested verification. We may store:

  • Your Discord user ID, username, display name, and avatar URL
  • Your verified Discord email address and email domain
  • Your Discord account creation time derived from your Discord user ID
  • Your safely resolved public IP address and derived network-reputation signals
  • The Discord server ID and verification status
  • The rule question shown, the answer selected, and the number of attempts
  • The applicable server-rules, Terms of Service, and Privacy Policy versions
  • Terms agreement and Privacy Policy acknowledgement timestamps
  • Verification expiry, processing, completion, and limited error information
  • Abuse-screening results, risk signals, automated decisions, and appeal-related audit information

We use this information to authenticate the member, confirm review of the server rules, record legal acknowledgements, assign the verified role, prevent replay or misuse, and resolve verification failures. One-time links are persisted in the verification database as cryptographic hashes and become unusable after they expire or are consumed.

During Discord server verification, we send the verified Discord email address and safely resolved public IP address to SFS over HTTPS for abuse screening. The verification risk record retains only selected reputation results rather than the submitted IP address or raw provider response. We may combine those results with limited local signals, such as Discord account age, local account restrictions, repeated failed challenges, and existing scammer controls. Weak or isolated signals are not treated as proof of abuse. If automated verification is declined, you may contact Stryx staff for manual review.

2.4. Payment & Billing Information

Payments are processed through PayPal. We do not store full payment card details on our servers. We maintain:

  • Invoices
  • Receipts
  • Past purchase records
  • Transaction IDs provided by PayPal

2.5. Communication Data

If you contact us through Discord, email, or the website, we may keep logs of:

  • Messages related to commissions or support
  • Project notes or service history
  • Submitted forms or inquiry information

2.6. Website Analytics

With your consent, we use Google Analytics to collect usage information such as:

  • Device type
  • Browser type
  • Pages visited
  • Approximate location (country/state)

2.7. Stryx Arcade & Game Site Data

When you use Stryx Arcade at games.stryx.org, we may collect and store information needed to operate game pages and account-based game features, including:

  • Stryx account and WordPress user IDs used to sync your main Stryx account with the game site
  • Email address, display name, nickname, and linked Discord display information used for account sync and profile display
  • Game ratings, vote values, game IDs, timestamps, and a hashed voter identifier
  • An anonymous rating cookie token for visitors who rate games without logging in
  • Recent-play activity, including game IDs and timestamps for logged-in users
  • Saved game state for supported games, including browser storage values such as local storage or IndexedDB data that the game uses for progress
  • Comments, comment moderation data, and related account or technical metadata
  • Technical data related to game embeds, proxy requests, errors, security, and abuse prevention

Game state sync is intended for gameplay progress and similar game data. You should not intentionally place sensitive personal information into game save fields, comments, usernames, or other public or gameplay-related areas.

2.8. Login, Security, and Abuse-Prevention Data

When you log in, attempt to log in, use Discord OAuth, or access the Stryx Arcade game site through your Stryx account, we may store security history used to protect accounts and detect misuse. This may include:

  • Email address or account ID associated with the event
  • Whether the login attempt succeeded or failed
  • IP address, hashed IP address, browser or user-agent information, and hashed user-agent information
  • The site or login source, such as the main website, Discord OAuth, Discord Verify, or Stryx Arcade
  • Timestamps and limited technical metadata needed for abuse prevention and alternate-account review

3. How We Use Your Information

Your information is used to:

  • Verify your Roblox account and identity when required
  • Authenticate you with Discord and connect or refresh your Discord-linked Stryx account
  • Verify Discord server membership, administer verified roles, and record the rules and legal versions acknowledged during verification
  • Process commissions and complete development orders
  • Send invoices, receipts, and order confirmations
  • Provide support and maintain project history
  • Improve our services, website, and user experience
  • Prevent fraud or misuse of our systems
  • Detect automated Discord verification abuse and route declined verifications for staff review
  • Operate Stryx Arcade game pages, comments, ratings, recent-play history, and optional gameplay state sync
  • Moderate comments, investigate abuse, protect game infrastructure, and enforce our Terms of Service

4. How We Store & Protect Your Data

We use modern security measures to protect your data, including encryption, secure backups, and restricted administrative access. Payment information is handled exclusively by PayPal’s secure systems.

5. Data Retention

We retain invoices, receipts, and purchase logs for accounting and tax purposes. Roblox OAuth verification data, Discord OAuth account connection data, and project-related information is retained only as long as necessary to maintain service integrity or comply with legal obligations. Stryx Arcade comments, ratings, recent-play records, and saved game state may be retained while the related account, game, comment, rating, or gameplay feature remains active, unless removed earlier through moderation, cleanup, or a valid data request. Security history used for fraud prevention, alternate-account review, abuse prevention, and infrastructure protection may be retained separately from clearable administrative audit logs where permitted by law. Discord server verification records are retained while needed to administer verified membership, investigate abuse or failed role assignments, resolve disputes, and meet legal obligations. One-time verification and processing values become unusable after their stated expiry. Records are deleted or anonymized when they are no longer required.

6. Cookie Notice and Consent

We use cookies and similar technologies for login sessions, security, consent preferences, game ratings, analytics, and other site functions. Strictly necessary cookies support authentication, account security, fraud prevention, and features you request. These cookies cannot be disabled through our consent tool because the relevant services cannot operate securely without them.

Nonessential analytics and third-party scripts are blocked unless you select Accept in our cookie notice. If you reject nonessential cookies, Google Analytics and consent-controlled third-party widgets will not load. You may change or withdraw your choice at any time by selecting Cookie Settings in the footer. Withdrawing consent does not affect processing that occurred lawfully before withdrawal.

We store your choice in the stryx_cookie_consent preference cookie for up to 180 days and share that preference across Stryx Development subdomains. When analytics consent is granted, Google Analytics may use cookies such as _ga to distinguish visits and measure site usage. We configure advertising storage, advertising user data, and advertising personalization as denied through Google Consent Mode.

Games may use browser storage such as local storage or IndexedDB for gameplay progress. For supported logged-in gameplay sync, Stryx Arcade may copy supported game storage values to our servers so progress can continue across sessions. Embedded games and other third-party content may use their own cookies or storage technologies when you interact with them, subject to their own privacy policies.

7. Sharing of Information

We do not sell or share your data with unrelated third parties. Information may be shared only with:

  • PayPal (for payment processing)
  • Roblox (for OAuth verification)
  • Discord (for OAuth login, account connection, server verification, role administration, communication, and ticket systems)
  • SFS (for verified-email and public-IP reputation screening during Discord server verification)
  • Cloudflare Turnstile (for automated-abuse prevention during Discord server verification and other protected forms)
  • Google Analytics (for website and game-site analytics)
  • WordPress and related site infrastructure (for Stryx Arcade accounts, comments, and game pages)
  • Game providers, distributors, embedded game hosts, and proxy infrastructure needed to load or operate playable games
  • Ad destinations or sponsored placement providers when you click or interact with sponsored content
  • Law enforcement if required by law

8. Children's Privacy

Stryx Development services, including Stryx Arcade, are not intended for children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or legal guardian and believe a child under 13 has provided personal information to us, contact us so we can review and remove it where appropriate.

9. GDPR and Other Privacy Rights

Where the GDPR, UK GDPR, or similar privacy law applies, Stryx Development acts as the data controller for personal data it determines how and why to process. Depending on your location and the circumstances, you may request:

  • Access to the data we store about you
  • Correction of inaccurate or incomplete information
  • Deletion of data where legally permitted
  • Restriction of or objection to certain processing
  • A portable copy of eligible personal data
  • Withdrawal of consent for consent-based processing

You may also lodge a complaint with the data-protection authority responsible for your location. We process essential account, security, and transaction data as necessary to provide requested services, comply with legal obligations, and pursue legitimate interests such as preventing fraud and protecting our systems. We rely on consent before activating nonessential analytics technologies.

If Discord server verification is declined by automated abuse screening, you may request a manual review by contacting support. Screening indicators are used to protect the server and are not treated as proof that a person has engaged in spam or other misconduct.

10. Policy Updates

This Privacy Policy may be updated from time to time. The “Last Updated” date at the top reflects the latest revision.

11. Contact Us

For privacy inquiries, data requests, or questions, contact us at:
[email protected]

© 2026 Stryx Development. All rights reserved.