Privacy Policy

MGS Link (“MGS Link”, “we”, “us”, or “our”) is a service that links Roblox accounts to Discord accounts and synchronizes Discord roles and nicknames based on Roblox group membership. This policy applies to our Discord bot, our web dashboard at app.mgslink.lol, our marketing site at mgslink.lol, and our background services (collectively, the “Service”).

By adding the bot to a Discord server or using the dashboard, the server’s administrators and members agree to the practices described here.

For the data described below, MGS Link acts as the data controller for account and operational data, and as a processor acting on the instructions of Discord server administrators for guild configuration and member-link data within their servers.

You can reach us at privacy@mgslink.lol.

We collect only what the Service needs to function:

• Discord account data: your Discord user ID, username, global display name, and avatar hash. For server administrators who sign in to the dashboard, we also store an OAuth session and the list of servers you can manage.
• Roblox account data: your Roblox user ID, username, display name, avatar URL, and public profile URL. During profile-code verification we read your public profile description once to confirm the code, and do not store its contents.
• Verification & link data: the association between your Discord and Roblox accounts, when it was created, and per-server sync status.
• Server (guild) configuration: settings an administrator chooses, such as verified/unverified roles, rank-to-role mappings, nickname templates, log channels, and feature toggles.
• Audit & operational logs: records of verifications, role syncs, setting changes, and errors, including actor and target Discord/Roblox IDs and a short message, used for transparency and troubleshooting.
• Billing data: for paid plans, a customer/subscription identifier and plan status. Card details are handled entirely by our payment processor — we never see or store full payment-card numbers.

• We never ask for or store your Roblox password or authentication cookies.
• We do not read your Discord direct messages or private server messages.
• We do not sell personal data, and we do not use it for advertising or third-party profiling.

• Verify Roblox account ownership and link it to a Discord account.
• Assign, remove, and keep Discord roles and nicknames in sync with Roblox ranks.
• Enforce server-configured rules such as alt-account limits, account-age requirements, and banned-account handling.
• Provide the dashboard, audit logs, and member search to administrators.
• Operate, secure, debug, and improve the Service, and prevent abuse.
• Process subscriptions and provide support.

Where the GDPR or UK GDPR applies, we rely on the following legal bases:

• Performance of a contract — to provide verification and role sync you request.
• Legitimate interests — to secure the Service, prevent abuse, and maintain audit logs, balanced against your rights.
• Consent — where required, for example when you choose to link your account.
• Legal obligation — to comply with applicable law.

We share data only with service providers that help us run the Service, under contracts that limit their use of it:

• Discord — to operate the bot and OAuth sign-in.
• Roblox — public APIs used to confirm ownership and read group ranks.
• Cloud hosting & database providers — to run our applications, database, and job queue.
• Payment processor (Paddle) — to handle subscriptions and act as merchant of record.

We may also disclose data if required by law, to enforce our Terms, or to protect the rights, safety, and security of our users or the public.

• Links & configuration are kept while the bot is in your server and your link is active.
• Audit logs are retained per plan: 14 days (Free), 180 days (Pro), and 365 days (Enterprise), after which they are automatically deleted.
• Verification sessions are short-lived and expire automatically.
• When you unlink, or an administrator purges guild data, the associated records are removed promptly. Backups are rotated on a rolling basis.

We use industry-standard measures including encrypted transport (HTTPS/TLS), scoped access controls, signed verification tokens that are single-use and expiring, server-side validation, and rate limiting. No system is perfectly secure, but we work to protect your data and to limit what we collect in the first place.

Depending on where you live, you may have the right to:

• Access, correct, or delete your personal data.
• Export your data (administrators can export audit logs as CSV).
• Object to or restrict certain processing.
• Withdraw consent at any time.

You can exercise core choices yourself:

• Run /verify unlink in Discord to remove your link.
• Server administrators can delete a server’s data from the dashboard’s Danger Zone.
• For any other request, email privacy@mgslink.lol and we will respond within 30 days. You also have the right to complain to your local data-protection authority.

The Service is intended for use in accordance with Discord’s and Roblox’s own minimum-age requirements. We do not knowingly collect personal data from children below the age required by applicable law or platform rules. If you believe a child has provided us data, contact us and we will delete it.

We and our providers may process data in countries other than your own. Where we transfer personal data internationally, we rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms.

We may update this policy as the Service evolves. When we make material changes we will update the “Last updated” date and, where appropriate, provide additional notice. Continued use of the Service after changes take effect constitutes acceptance.

Privacy questions or requests: privacy@mgslink.lol. General support: support@mgslink.lol.

Roblox is a trademark of Roblox Corporation. Discord is a trademark of Discord Inc. MGS Link is an independent service and is not affiliated with, endorsed by, or sponsored by either company.