Privacy Policy

This site is a private documentation and access-control system for role-based SCP Foundation documentation. Discord authenticates the portal session, while a verified Roblox identity and live Roblox group ranks decide what documents, departments, records, and tools each user may access.

When you sign in, we may collect and store information provided through Discord, including your Discord ID, display name, username, and avatar. We may also store your verified Roblox User ID, username, display name, group ranks, department memberships, and role-based permission results.

We also collect technical and security information, including IP addresses, browser user agents, timestamps, login activity, session status, document views, document creation/edit/archive/delete actions, Area 37 departmental team activity and weekly quota progress, failed access attempts, ban records, session revocation records, and administrator moderation actions.

This information is used to authenticate users, link a verified Roblox identity, check current Roblox group ranks and department memberships, calculate weekly department quotas from time spent on matching Area 37 teams, deliver quota reminders, enforce clearance rules, protect restricted documents, display relevant department access, investigate misuse, prevent abuse, maintain audit logs, revoke sessions, apply account or IP-based bans, and operate emergency maintenance controls.

Documents, department log templates, submitted records, record subjects, access logs, ban records, user records, linked Roblox user IDs, Roblox usernames and display names, departmental activity segments, weekly quota totals, notification delivery status, and site settings may be stored in Supabase. Records may be linked to a Roblox User ID before that person creates a portal account. Authentication may be handled through Discord OAuth, Roblox OAuth, and NextAuth. Roblox OAuth access and refresh tokens are not retained after identity verification. Hosting and server-side execution may be provided by Vercel.

Access to administrative records is restricted to authorized administrators. However, no system can be guaranteed perfectly secure, and users should not submit sensitive personal information unless it is necessary for the documentation system.

Department personnel files combine Roblox ranks and memberships with department activity, submitted logs and management comments. We also store application questions, answers, review notes and decisions; leave dates, reasons and decisions; nominated acting command; and bot delivery or role-sync status. Access follows current department ranks and section permissions assigned by the Overseer. O5 Head can view department operations across the Foundation. Acting command recorded during leave is a social designation and grants no extra panel access.

Approved leave is used to reduce quota requirements for the covered dates, pause quota reminders during leave, and manage the Leave of Absence role in the relevant department server and, for O5 personnel, the O5 server. Keep leave reasons brief and avoid medical details or sensitive personal information. Authorised leave reviewers can read these reasons; O5 leave requires O5 Head or Administrator review.

SCPF Automation can send application and leave results to Discord, subject to notification preferences. Account bans, IP bans, administrative session termination and data wipes trigger mandatory security DMs regardless of those preferences. Delivery can fail if Discord blocks messages. If management enables Discord delivery for a log type, the filed log, its fields, author and target personnel details are posted to the selected department channel. Discord channel permissions determine who can read that copy independently of panel permissions. Long entries may include a complete text attachment. The bot stores channel destinations, delivery status and role-assignment tracking to operate these features.

Internship rules configured in the panel are checked for prohibited content before use in Area 37 and may also pass through Roblox text filtering. Rules and acknowledgement state can be held in Roblox game services. Roblox group rank changes and department join approvals or removals use authorised service connections and are audited. Main Foundation membership removals and join approvals are disabled in this panel.

The site owner can preview and permanently erase identifiable user data from the live panel database, including authored shared content and dependent records. Where data cannot be reliably linked to an account, such as references using only a name in free text, manual review may be needed. A protected hash is kept for up to 31 days to block old sessions after erasure, without retaining the raw account ID in that marker. Every data wipe requires a reason. That reason, an anonymised account reference, the acting administrator, operation reference and notification delivery result remain in protected audit records. A temporary Discord recipient ID is retained until the mandatory security DM is delivered or seven days pass. Signing in again or generating new activity may create new records.

The site owner can also clear stored IP fields and structured IP metadata from the live database. This removes IP-only bans but preserves account bans and does not stop future IP logging. Log deletion queues a best-effort attempt to remove its recorded Discord message. Copies may remain if the bot cannot find or delete them. Live database erasure does not guarantee removal of provider backups, Roblox records or other external copies. Contact the administrator to coordinate requests involving those services.

Cookies and session tokens may be used to keep users signed in, verify authentication, enforce session revocation, and protect restricted areas of the site.

The administrator may retain logs and moderation records for security, audit, abuse-prevention, and operational purposes. Some records may be kept even after access is removed if needed to protect the site.

By using this site, you understand that your access and activity may be logged and reviewed by authorized administrators. If you need account data reviewed, corrected, restricted, or removed where practical, contact the site administrator.