Privacy notice

Discord accounts and sessions

Discord sign-in requests the identify scope. We receive your Discord User ID, username, display name (when provided), and avatar (when provided). Your Discord User ID is the permanent link to your Stellarock account; changing your names or avatar does not create a new account. A first sign-in creates a Client account. Authorized leadership may promote that same account to Org Member, choose a rank, and assign permissions. Discord sign-in does not request or store your email address for approval, and we do not ask for your Discord password.

We store your website username, optional RSI handle, account status, rank, permissions, and sign-in dates. A secure, HTTP-only session cookie identifies your sign-in for up to 12 hours; a session also expires after about two hours without activity or when revoked at sign-out. The browser keeps an unfinished cart in session storage for the current browser tab. A temporary cookie protects the Discord sign-in redirect and expires after ten minutes.

Requests, orders, and activity

Inventory records can include descriptions, quantities, locations, in-game prices, photos, the contributing member, and changes to those items. Requests and orders store the contact name you enter, requested items or services, notes, status, assignment, and timestamps. We keep account actions and administrative audit records for member status, rank, permission, and ban changes. The website does not currently maintain a payout ledger.

Website notifications record an event, its intended recipient, and when that recipient reads it. Notification records older than 90 days are removed when new notifications are created; reading one does not erase the underlying order, request, inventory record, or audit history.

When configured, the site sends request details and the contact name to a Discord staff webhook. The optional Discord bot can check server membership for checkout, create an order thread, invite the client, and post order status updates. Discord handles those messages under its own privacy policy.

Older email records

The current Discord sign-in and member promotion flow does not need an email address. Historical accounts, member profiles, approval records, inventory activity, and any older bans may still contain an email address from the previous system. The legacy site sign-in can also provide an email address, which is used for that existing account and older access or ban records. We retain those fields while their links to existing accounts and history are reviewed; we do not use them to create a new Discord account or approve a new Org Member.

Who can see it

Visitors can see public inventory, photos, and the public roster’s member names and ranks. Members can choose whether their Discord username and RSI handle appear on their profile and the public roster. Org Members can see more inventory holder information and activity. Authorized staff can see and manage requests, accounts, permissions, and bans according to their roles. Clients can see their own requests. Our hosting provider stores the site records and uploaded photos needed to operate the website. We do not sell account information or use it for advertising.

Retention and your choices

We keep account, inventory, activity, ban, request, and order records as needed for site operations, access decisions, history, and resolving disputes. Demotion or suspension preserves the account and its past requests, orders, contributions, and activity. We do not have an automatic self-service account deletion button.

To ask for access, correction, or deletion of your data, privately contact a site administrator through the Stellarock Discord server or the RSI organization page. Include your Discord identity and the specific record so we can verify and process your request. If you cannot access the server, use the org page to reach leadership. We will assess requests under applicable law and technical or record-keeping needs; we cannot delete copies controlled by Discord or RSI on your behalf. You may revoke the site’s Discord authorization from your Discord account settings, but that does not itself erase site records.

Updates

We will revise this notice if the features or data practices change. Check the date above for the latest published version. For site conduct and in-game request details, read the site terms.