Privacy notice

Operator: RRD group · Contact: rawrevdesign@gmail.com

Records and purpose

We store Discord guild/member IDs, officer-role configuration, event titles/times, availability, assignment and confirmation states, and limited replay/rate/audit metadata. These support event coordination, permission/capacity checks, safe retries, exports and abuse prevention. We do not request message history, private messages, game credentials or payment card/bank details. No advertising profiles or sale of API data are implemented.

Who can access records

Members can view event cards in their server; authorized officers can export that server's event records. Personal export contains only the invoking member's signup records. RRD group and Cloudflare process records to operate the service; Discord delivers signed interactions and handles subscriptions. No specific hosting country is promised.

Subscription information

Discord supplies app/SKU/guild entitlement information with signed interactions. We check it to determine the server's event allowance. Raw interaction bodies, interaction tokens and entitlement objects are not intentionally persisted in the roster database. Discord handles checkout and billing information under its own policies.

Retention and your controls

Events and linked signups are scheduled for removal 30 days after event end. Receipts expire after 24 hours, audit entries after 30 days and rate counters after roughly two minutes. Outages/provider limits may delay cleanup. Guild officer configuration remains until verified operator deletion. Use /lineup mydata to export your signup records and /lineup forget to remove them from live records and cached responses. Minimal actor/interaction IDs, request hashes and time remain for up to 24 hours to prevent replay recreating deleted signups.

For full erasure, corrections or server-wide deletion, contact rawrevdesign@gmail.com. We verify request authority using the minimum necessary information; never send passwords or tokens. Uninstalling does not automatically erase existing data or cancel billing. Departed-member cleanup requires an officer or verified support request.

Hosting and recovery

Cloudflare Workers and SQLite-backed Durable Objects host the service. Cloudflare may process ordinary request information for delivery/security. Its point-in-time recovery window is 30 days, so deleted records may remain recoverable during that window. The app does not maintain a complete external history of self-service deletions. Accordingly, an older recovery snapshot must not be returned to service unless a complete independent deletion history is available and all deletions have been reapplied and verified. Without that history, recovery must start with empty roster data. Additional operator backups are not currently configured. The static site has no analytics, signup form or embedded checkout code.

Questions

Applicable access, deletion, correction and objection rights depend on your location. Send requests or concerns to rawrevdesign@gmail.com. Material changes will be dated and communicated as applicable.