IP address, browser and device information, requested pages, referring page, request time, network diagnostics, and security events may be processed by our hosting, content-delivery, and security providers.
RIO GRANDE VALLEY ROLEPLAYBACK TO HOME DATA TRANSPARENCY
PRIVACY
POLICY.
What rgvrp.xyz collects, why we process it, who may receive it, and the choices available to you.
PLAIN-LANGUAGE SUMMARY
RGV does not sell personal information, run advertising trackers, or require a website account. We collect the information needed to operate the website, review Discord appeals and moderator applications, prevent abuse, and protect the community.
SCOPE
Where this policy applies.
This Privacy Policy applies to Rio Grande Valley Roleplay's website at rgvrp.xyz, including the Valley Customs page, Discord appeal form, Discord moderator application, private response pages, and related website APIs. “RGV,” “we,” and “us” refer to Rio Grande Valley Roleplay.
It does not govern Discord, Roblox, ER:LC, Melonly, social networks, evidence-hosting services, or other websites you open from our links. Those services process information under their own policies.
INFORMATION WE OBTAIN & PROCESS
Data depends on how you use the site.
Discord username and user ID, approximate ban date, prior-appeal answer, ban context, appeal explanation, optional evidence URL, truthfulness confirmation, submission time, generated appeal ID, and private access token.
Discord username and user ID, timezone, weekly availability, moderation or leadership experience, motivation, scenario response, optional additional information, truthfulness confirmation, submission time, generated application ID, and private access token.
Discord user ID, Roblox user ID, Roblox username and display name, verification time and status, short-lived private verification tokens, and short-lived OAuth security state. We request only Roblox's openid and profile scopes. We do not receive a Roblox password or security cookie and do not request access to Robux, inventory, games, groups, messages, or account settings.
Review status, reviewer Discord ID and name, reviewer note, review time, and the Discord channel and message identifiers used to deliver and manage a submission.
The time a form was opened, a hidden spam-check field, content length, and IP address may be processed to detect automated submissions and enforce submission limits. IP addresses used by the application rate limiter are not intentionally written to the application database.
Free-text answers and linked evidence may contain additional information you voluntarily provide. Do not submit passwords, authentication tokens, home addresses, government IDs, financial details, medical information, or another person's private data.
The website currently does not offer purchases, advertising, or first-party analytics. Valley Customs verification creates an identity link for Discord role access, not a general-purpose website account.
HOW WE USE INFORMATION
Only for defined community purposes.
- Deliver pages, forms, images, and other website functions.
- Receive, organize, verify, and review appeals and moderator applications.
- Confirm a Valley Customs member's Roblox identity and assign or remove Discord verification roles.
- Notify authorized RGV reviewers through Discord and record their decisions.
- Maintain community standards, investigate abuse, prevent spam, and protect website and Discord systems.
- Troubleshoot errors, maintain availability, and understand security incidents.
- Comply with applicable law, enforce policies, and protect the rights and safety of RGV and its community.
Where applicable law requires a legal basis, processing may be based on providing a service or review you request, RGV's legitimate interests in operating and securing its community, consent for optional information, or compliance with legal obligations.
RGV does not use website submission data for targeted advertising, does not sell or rent personal information, and does not make appeal or application decisions solely through automated processing. Authorized people review submissions.
COOKIES, LOGS & AUTOMATIC COLLECTION
Security tools may collect technical data.
RGV does not currently operate advertising or analytics cookies. Cloudflare may place strictly necessary security cookies such as __cf_bm to identify and mitigate automated traffic. Cloudflare states that this cookie is site-specific, does not correspond to a user ID in our application, and expires after a period of inactivity. Read Cloudflare's cookie documentation.
Hosting and security providers may create request, error, abuse-prevention, and availability logs. Their logs can include IP addresses, request headers, browser details, timestamps, requested URLs, response status, and diagnostic identifiers. Blocking essential cookies may cause security challenges or portions of the site to work incorrectly.
WHEN INFORMATION IS DISCLOSED
Limited to people and services that need it.
- Authorized RGV faculty and leadership: to review submissions, make decisions, maintain records, and protect the community.
- Discord: submission notices and review controls are delivered to authorized Discord channels by an RGV bot. Discord also receives role updates when a Valley Customs member completes verification. Discord processes that content under its Privacy Policy.
- Roblox: members who choose to verify are redirected to Roblox's official OAuth authorization page. Roblox returns the basic identity information the member approves under its Privacy Policy.
- Hosting and security providers: the site uses ChatGPT Sites/OpenAI and Cloudflare infrastructure to host, deliver, secure, and maintain the service. See the ChatGPT Sites Data Processing Addendum, OpenAI Privacy Policy, and Cloudflare Privacy Policy.
- Services you choose: an evidence URL or external link is processed by the destination service when you submit or open it.
- Legal and safety disclosures: information may be disclosed when reasonably necessary to comply with law, respond to valid legal process, investigate fraud or abuse, or protect a person's safety and rights.
Providers may process information in the United States or other locations where they operate, subject to their contractual and legal safeguards.
RETENTION & DELETION
Records are kept only while reasonably needed.
Appeals, applications, evidence links, delivery identifiers, decisions, and reviewer notes may be retained while needed to complete a review, document moderation history, resolve disputes, prevent repeated abuse, maintain community safety, or meet legal obligations.
Completed Valley Customs verification links between Discord and Roblox identifiers may be retained while the member remains in the server or while needed to prevent duplicate or abusive account linking. Unused verification tickets expire after ten minutes; OAuth state expires after five minutes. Roblox access and refresh tokens are not stored and are revoked after the role update is completed.
The website does not currently apply a fixed automatic deletion date to these records. RGV may delete, de-identify, or restrict records when they are no longer reasonably necessary. Hosting, Discord, and security providers retain their own copies and logs according to their policies.
You may request access, correction, or deletion by contacting us. We may retain limited information when necessary for security, moderation integrity, legal compliance, or the establishment or defense of claims.
SECURITY & PRIVACY PROTECTIONS
Safeguards are built into the website.
- HTTPS transport and HSTS instruct supported browsers to use secure connections.
- A Content Security Policy limits which resources pages may load.
- Anti-framing, MIME-sniffing, referrer, and browser-permission restrictions reduce common web risks.
- Private response pages and APIs are marked no-store and no-index to reduce caching and search exposure.
- Appeals, applications, and verification flows use long random private links; bot and OAuth credentials remain server-side.
- Database operations use bound parameters, submission fields are validated and length-limited, and public forms include spam and rate-limit checks.
- User-submitted evidence links open without granting the destination access to the original page and are marked as user-generated and not endorsed by RGV.
- A public security contact file helps responsible reporters reach RGV.
No website or storage system can be guaranteed completely secure. Keep private links confidential and contact us promptly if you believe information or an RGV system has been exposed.
YOUR CHOICES & PRIVACY RIGHTS
You can ask about your information.
Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability, or objection, and to withdraw consent where processing relies on consent. You may also appeal a privacy-request decision where local law provides that right.
Email contact@rgvrp.xyz or open a ticket through the official RGV Discord. Include your Discord username and user ID, the type of submission, and enough information for us to locate and verify the record. Do not send a password or bot token. We may ask for reasonable verification before acting on a request.
You may also contact the relevant provider directly about data it controls through Discord, OpenAI, or Cloudflare.
CHILDREN'S PRIVACY
The forms are not for children under 13.
The website and its submission forms are not directed to children under 13, and RGV does not knowingly collect personal information from children under 13. A person under 13 should not submit an appeal, application, evidence, or other personal information through the website.
If a parent or guardian believes a child under 13 submitted personal information, contact contact@rgvrp.xyz so the record can be investigated and addressed.
POLICY CHANGES
Updates will be posted here.
RGV may update this policy when the website, submission workflows, providers, security practices, or legal requirements change. The effective and last-updated date at the top identifies the current version. Material changes may also be announced through the RGV Discord.
PRIVACY CONTACT
Questions or requests?
Email contact@rgvrp.xyz or open a ticket in the official RGV Discord. Security concerns may also be reported using the contact listed at /.well-known/security.txt.