Privacy Policy

This site is a private documentation and access-control system for role-based SCP Foundation documentation. It uses Discord authentication and live Discord role checks to decide what documents, departments, and tools each user may access.

When you sign in, we may collect and store information provided through Discord, including your Discord ID, display name, username, avatar, email address if supplied by Discord, server membership status, and role-based permission results.

We also collect technical and security information, including IP addresses, browser user agents, timestamps, login activity, session status, document views, document creation/edit/archive/delete actions, failed access attempts, ban records, session revocation records, and administrator moderation actions.

This information is used to authenticate users, verify current Discord roles, enforce clearance rules, protect restricted documents, display relevant department access, investigate misuse, prevent abuse, maintain audit logs, revoke sessions, apply Discord-account or IP-based bans, and operate emergency maintenance controls.

Documents, access logs, ban records, user records, and site settings may be stored in Supabase. Authentication may be handled through Discord OAuth and NextAuth. Hosting and server-side execution may be provided by Vercel. These services may process data as needed to operate the site.

Access to administrative records is restricted to authorized administrators. However, no system can be guaranteed perfectly secure, and users should not submit sensitive personal information unless it is necessary for the documentation system.

Cookies and session tokens may be used to keep users signed in, verify authentication, enforce session revocation, and protect restricted areas of the site.

The administrator may retain logs and moderation records for security, audit, abuse-prevention, and operational purposes. Some records may be kept even after access is removed if needed to protect the site.

By using this site, you understand that your access and activity may be logged and reviewed by authorized administrators. If you need account data reviewed, corrected, restricted, or removed where practical, contact the site administrator.