Privacy Policy

How the Roblox Integrity Association (RIA) collects, stores, and protects data.

Overview

The Roblox Integrity Association ("RIA") operates as a community-driven threat-prevention archive and scam logging platform. We take data privacy seriously and are transparent about how information is handled across our web application, Discord bots, and databases.

1. Information We Collect

Discord Account Information

When users interact with our Discord bots or log into the web platform, we collect public Discord identifiers including User IDs, usernames, global display names, and avatar hashes to maintain accurate scam records and user directory listings.

Log & Evidence Submissions

Reports submitted by community members contain incident reasons, transaction history, timestamps, and proof links (such as screenshots or chat archives) provided as evidence of fraudulent activity.

2. Legal Basis & Purpose for Processing

Fraud Prevention & Legitimate Interest

Under Article 6(1)(f) of the European Union General Data Protection Regulation (EU GDPR), personal data associated with malicious actors or scam logs is processed without explicit consent for the overriding purpose of public protection, fraud prevention, and community safety within the Roblox ecosystem.

Data Distribution

Verified logs are displayed publicly on our directory web app and may be broadcasted to partnered Discord servers using integrated tools like Astra or Discord crosslog features.

3. PII Protection & Data Security

RIA strictly prohibits the publication of sensitive Personally Identifiable Information (PII) such as real legal names, home addresses, phone numbers, IP addresses, or financial credentials. Any unintentional PII disclosures within submitted evidence screenshots are subject to immediate redaction or removal by our moderation staff upon review.

4. Data Retention & Erasure Requests

Data deletion and erasure requests are evaluated on a strict case-by-case basis. Requests to erase valid, verified scam logs are typically declined under GDPR fraud prevention exemptions. However, records proven to be false, inaccurate, framed, or successfully resolved will be updated or expunged promptly following an administrative review.