Privacy Policy

Last updated: 10 November 2026

This policy explains what the Nectary websites store when you sign in with Roblox: the staff portal (nectarystaff.com), the affiliate form (affiliates.nectarystaff.com) and the ban appeal form (appeals.nectarystaff.com). Nectary is a Roblox community group (group 16100479). It is not affiliated with Roblox Corporation.

Signing in with Roblox

We use Roblox's official sign-in (OAuth). We only ask for the openid and profile scopes, so we receive your Roblox user ID, username, display name and avatar picture. We never see your Roblox password, email address or any other account details, and we cannot act on your Roblox account.

What we store

• Staff members: your Roblox ID, username, display name, avatar, your rank and role in the Nectary group, your department, what you fill in during onboarding (age group, time zone, and your birthday only if you choose to share it), your Discord user ID if you add it, time spent in our Roblox game, inactivity notices and other staff records, and a log of actions you take in the portal.
• Affiliate applications: your Roblox ID and username, your role in your group, your group's details, the Discord usernames, Discord user ID and invite link you give us, your representatives' Roblox and Discord usernames, and your answers.
• Ban appeals: your Roblox ID and username, the permanent ban on your account, your Discord username, your appeal and its outcome.
• Sign-in cookies: a cookie that keeps you signed in. Staff sessions last up to 24 hours; affiliate and appeal sessions last 2 hours. We use no advertising or tracking cookies and no analytics.

We do not store IP addresses or browser details.

Why we use it

Only to run Nectary: to give staff access based on their group rank, keep staff records, review affiliate applications and ban appeals, and lift bans when an appeal is accepted. We do not sell or share your data, and we do not use it for advertising.

Who can see it

Only Nectary staff whose role needs it. For example, PBans and appeals are visible to Executive Assistants and up, and affiliate applications to our Public Relations team. In our Discord server, new affiliate applications are announced without personal details; when one is decided, the group name and the applicant's Discord account are mentioned so our Public Relations team can send the result. Our server is hosted by Oracle Cloud and our domain by Cloudflare.

How long we keep it

• Former staff records are deleted 5 years after someone leaves staff.
• Ban records, appeals and affiliate applications are kept as moderation and partnership history.
• Expired sign-in sessions are deleted automatically. Daily backups are kept for 14 days.

Your choices

You can sign out at any time. You can remove Nectary's access in your Roblox account settings under Authorized Apps. To ask what we store about you, or to have it corrected or deleted, contact a Nectary Executive Director through our Roblox group or Discord server. Some records, such as bans, may be kept for safety reasons.

Children

Roblox is used by people of all ages. We only collect what is listed above, never ask for real names, addresses or contact details beyond Discord usernames, and only use it for the purposes described here.

Changes

If we change this policy, we update this page and the date at the top.