PRIVACY POLICY

Modulus ("we", "us", the "Bot") is a Discord application that retrieves publicly available Roblox information and returns it inside Discord. This policy explains what data we process, why, how long we keep it, and the choices you have.

This policy covers the Modulus bot, the modulusbot.com website and the Modulus public API. It does not cover Discord, Roblox, or any other third-party service — those are governed by their own policies, linked throughout this document.

We process the minimum needed to run the Bot. Data falls into four categories.

To be explicit about the things people most often worry about:

• ▸Message content. Modulus operates through slash commands and does not request Discord's privileged Message Content intent. We cannot read your conversations.
• ▸Direct messages, voice activity, or your Discord friends list.
• ▸Passwords, authentication tokens, session cookies, or 2FA codes for any service. We will never ask for them, and you should never share them with any bot.
• ▸Payment or financial information. Modulus is free and processes no payments.
• ▸Your personal IP address is never stored persistently or shown to other users.

We process data to operate the service you asked for: resolving your command, returning a result, caching that result so repeat lookups are fast and we do not overload upstream APIs, enforcing rate limits, and diagnosing faults.

Where the UK/EU GDPR applies, our lawful bases are legitimate interests (running and securing a free service that you have chosen to invoke) and, for optional features, your consent — which you give by choosing to run a command. We do not use your data for advertising, marketing, profiling, or automated decision-making that produces legal effects.

Results are cached so the Bot stays fast and so we do not place unnecessary load on Roblox. Cached data is kept for a maximum of 7 days, after which it expires automatically and is refreshed the next time it is requested. Most information is held for far less time than that — often only a few minutes.

This includes everything the Bot looks up on your behalf: profile details, avatars, friend and follower information, inventory contents, game statistics, market data, and the link between a Discord account and a Roblox account.

Running the Service means exchanging requests with a small number of external providers. We share only what is necessary to fulfil your command — typically a Roblox username, user ID or item ID. We do not sell, rent or trade your data to anyone, and we never share it for advertising or marketing.

The third parties we use are:

• ▸Discord
• ▸Roblox
• ▸Rolimons
• ▸Bloxlink
• ▸Our hosting and database provider

Depending on where you live, you may have the right to access the data we hold about you, correct it, delete it, restrict or object to its processing, receive a copy in a portable format, and lodge a complaint with your local data protection authority.

Because almost everything we hold is a short-lived cache of public Roblox data, the simplest way to remove it is to wait for it to expire. If you want it gone sooner, contact us on the support server with your Roblox username or ID and we will purge every cached record and any account link within 30 days.

Residents of California may request disclosure of the categories of personal information collected and request deletion. We do not sell or share personal information as those terms are defined under the CCPA/CPRA, so there is no opt-out to exercise.

Discord requires all users to be at least 13 years old, or older where local law sets a higher age. Modulus is available only through Discord, so the same requirement applies. We do not knowingly collect personal information from anyone under the applicable minimum age.

Roblox is used by children under 13. Modulus only ever reads information Roblox already makes public and never contacts Roblox users directly. If you believe a child under the applicable minimum age has used the Bot in a way that resulted in us holding their personal information, contact us and we will delete it promptly.

We apply reasonable technical and organisational measures: encrypted connections (HTTPS/TLS) to every service we contact, API keys held in server-side environment variables and never exposed to browsers, constant-time comparison of API credentials, rate limiting on every endpoint, and a database that is not publicly reachable.

No system is perfectly secure. We cannot guarantee absolute security, and you use the Bot at your own risk. If we become aware of a breach affecting your personal data, we will notify affected users and any required regulator without undue delay.

Modulus is operated using infrastructure that may be located outside your country, including in the United States. Discord, Roblox and our hosting provider operate globally. Where personal data is transferred out of the UK or European Economic Area, we rely on the safeguards offered by those providers, such as standard contractual clauses.

We may update this policy to reflect changes to the Bot or to legal requirements. The "last updated" date at the top always reflects the current version. Material changes will be announced in the support server. Continuing to use Modulus after a change means you accept the updated policy.

For any privacy question, data access request or deletion request, reach us in the official Modulus support server. Please include your Roblox username or ID so we can locate any cached records.