Los Angeles RoleplayLA Roleplay

Privacy Policy

Effective October 26, 2026 · Applies to https://losangelesrp.site

This policy explains what Los Angeles Roleplay collects when you use our community panel, our Discord bot, and our Emergency Response: Liberty County private server, why we collect it, and what control you have over it. We are a private hobbyist roleplay community, not a commercial service.

1. What we collect

From Discord (when you sign in)

  • Your Discord user ID, username, display name, and avatar;
  • Which roles you hold in our Discord server, so panel access can mirror your rank;
  • An OAuth2 access and refresh token, used only to read the two items above.

We request the identify and guilds.members.read scopes. We do not request, read, or store your email address, your direct messages, or any data from servers other than ours.

From Roblox (when you verify)

  • Your Roblox user ID, username, display name, and avatar thumbnail;
  • An OAuth2 access token used once, at the moment of verification, to confirm the account is yours.

We request the openid and profile scopes. We never receive your Roblox password, your email, your Robux balance, or the ability to act on your Roblox account.

From our ER:LC private server

Through the Police Roleplay Community private-server API we record activity that takes place inside our server:

  • Join and leave events (Roblox username, user ID, timestamp);
  • In-game kill logs, admin command logs, and moderation calls;
  • Player counts, queue length, team assignment, and in-game staff level;
  • Bans and blacklist entries applied by our staff.

This data concerns our private server only. We cannot and do not see your activity in any other Roblox experience.

Created by you on the panel

  • Shift records, leave requests, applications and their answers;
  • Infractions, promotions, BOLOs, and moderation notes written about or by you;
  • An audit entry for each action you take through the panel or bot.

Technical data

  • A session cookie (larp_session) holding a random token — it contains no personal data;
  • The IP address and browser user-agent recorded with your session and with audit entries, used to spot account compromise and ban evasion.

2. Why we use it

  • To let you sign in and to decide what you are allowed to see and do;
  • To run the department — shifts, quotas, rosters, applications, and leave;
  • To moderate fairly — so every sanction has a reason, an author, and a timestamp;
  • To keep the server safe — detecting ban evasion, exploiters, and blacklisted players;
  • To show activity statistics to the staff team.

We do not sell your data, we do not share it with advertisers, and we do not use it for any purpose beyond running this community.

3. Who can see it

Access inside the panel is controlled by a permission system. Ordinary members see only their own records. Staff see what their rank allows — for example, a supervisor can read shift history and disciplinary records, while a general member cannot. Every privileged view and action is written to an audit log.

Data leaves our systems only to the services that make the community work:

  • Discord — to sign you in, read your roles, and post log messages in our own server;
  • Roblox — to verify your account and fetch public profile details and avatars;
  • Police Roleplay Community — to read our private server’s state and issue in-game commands.

4. How long we keep it

  • Sessions — expire after 14 days, and are deleted once expired;
  • OAuth state — deleted within ten minutes of being created;
  • Server logs (joins, kills, commands, mod calls) — kept for as long as they are useful for moderation, then pruned;
  • Shifts, infractions, applications and audit entries — kept while you are a member, and for a reasonable period afterwards so decisions remain reviewable;
  • Bans and blacklist entries — kept while they are in force, so they can be enforced and appealed.

5. Your choices

  • Unlink Roblox at any time from your panel profile;
  • Revoke our Discord access from Discord’s own authorised-apps settings;
  • Ask for a copy of the data we hold about you;
  • Ask for deletion of your account and personal data. We will remove your profile and personal records, but we may keep a minimal, anonymised record of moderation actions where deleting it would let someone evade a ban.

Requests can be made to the management team through our Discord server.

6. Security

Integration secrets, including our ER:LC server key, are encrypted at rest with AES-256-GCM. Session cookies are HTTP-only and same-site. Access to the panel’s underlying database is limited to the owner of the deployment. No system is perfectly secure; if we discover a breach affecting your data, we will say so in our Discord server.

7. Children

The Service is not directed at children under 13. If we learn that someone under 13 has an account, we will remove it and its personal data.

8. Changes

If this policy changes materially, we will announce it in our Discord server and update the effective date above.

9. Contact

For any privacy question or request, reach the Los Angeles Roleplay management team through our Discord server.