Privacy policy

Who operates the service

Way-Star Development ("Way-Star Development", "we", "us") operates the Way-Star Development Discord bot, the Way-Star Development administrative portal, and the databases and internal tools supporting those services. The privacy contact is May at ope674cmay@gmail.com.

Services covered

This notice covers the Discord bot, slash and message commands, Discord account and role synchronization, Roblox account linking and verification, the administrator portal, applications, staffing records, development and quality-control records, leave requests, moderation and disciplinary systems, Internal Affairs and background-check records, payroll allocation records, privacy requests, security logs, and audit trails.

Information we collect

• Discord identifiers, usernames, display names, avatars, guild membership, roles, department assignments, and access status.
• Roblox usernames, Roblox user IDs, linked-account information, ranks, and verification records.
• Bot records such as points, warnings, custom roles, custom-role blacklists, bug-report bans, command-use records, and operational logs.
• Portal records such as applications and answers, development logs, evidence links, quality-control reviews, quota records, leave requests, payroll allocations, moderation and disciplinary records, Internal Affairs cases, appeals, notes, evidence, findings, and timelines.
• Technical and security information including IP addresses, hashed IP information, browser or device user-agent strings, login attempts, session timestamps, pages or routes requested, referrers, response codes, OAuth state records, and administrative actions.
• Privacy-request information, including the requester identity, request details, jurisdiction, age declaration, parent or guardian attestation, processing notes, and completion records.

How we obtain information

Information may come directly from you, from your interaction with the Discord bot or portal, from Discord and Roblox APIs, from Way-Star Development staff and administrators, from submitted evidence or links, and from automatic security and activity logging.

Why we use information

• Authenticate users and control access to WEI/Way-Star Development systems.
• Operate bot commands, link accounts, administer points and roles, and respond to support or bug reports.
• Manage staff, applications, projects, quality control, leave, payroll allocations, moderation, discipline, investigations, appeals, and internal administration.
• Protect the service, prevent abuse, investigate security incidents, maintain accountability, and preserve audit trails.
• Comply with applicable law, respond to valid legal demands, and establish, exercise, or defend claims.
• Respond to access, correction, deletion, objection, restriction, or export requests where applicable.

Legal bases and permission

Depending on your location and the activity, we may rely on consent, performance of a service you requested, legitimate interests in operating and securing Way-Star Development, compliance with legal obligations, and the establishment or defense of claims. Consent is not used as the sole basis when another lawful basis is more appropriate. You may withdraw consent where processing actually depends on consent, but withdrawal does not invalidate earlier lawful processing.

Sharing and service providers

We do not sell personal information. Information may be disclosed to authorized Way-Star Development personnel based on role and operational need, to the person who submitted it where appropriate, to service providers used for hosting, authentication, storage, networking, moderation, and integrations, or when required by law or necessary to protect rights and safety. Providers may include Discord, Roblox, Railway, PostgreSQL hosting, Vercel, GitHub, Trello, and other configured infrastructure. Their own privacy terms also apply to information they independently process.

International processing

WEI and its providers may process information in the United States and other countries. Those countries may have different privacy laws. Where applicable law requires transfer safeguards, Way-Star Development will use an available lawful transfer mechanism and reasonable contractual or technical protections.

Retention

We keep personal information only while reasonably needed for the purposes described here, legal compliance, security, disputes, investigations, and auditability. As an operating target, routine web request logs should be reviewed for deletion after 90 days; failed and successful login logs after 180 days; closed applications after 180 days unless an active dispute, safety concern, or documented operational need exists; ordinary command-use logs after 180 days; and inactive session or OAuth-state records after they expire. Moderation, payroll, investigation, appeal, security, deletion, and audit records may be retained longer when necessary to preserve accountability or defend decisions. These are retention targets, not promises that override a legal hold or technical backup cycle.

Security

WEI uses role-based access, Discord authentication, session controls, hashed session tokens, HTTPS when correctly deployed, environment-based secrets, database access controls, logging, and audit records. No system can guarantee absolute security. Do not submit passwords, government identifiers, financial account details, medical information, or other unnecessary sensitive information through bot commands, applications, evidence fields, or privacy requests.

Automated decisions

WEI does not intend to make solely automated decisions that produce legal or similarly significant effects. Bot permissions and portal access may be automatically updated from Discord roles, but staffing, disciplinary, investigative, and privacy-request decisions are intended to involve authorized human review.

Your requests

You may submit an access, correction, deletion, or export request at the privacy request form. We may ask you to verify control of the relevant Discord account and may request enough information to locate your records. We may redact another person's information, preserve records subject to an exemption or legal hold, and refuse or limit requests where permitted by law. Authenticated users may download a machine-readable JSON copy of records directly associated with their Discord ID.

Changes and complaints

We may update this notice when our services, laws, or data practices change. The effective date will be updated for material revisions. You may complain to Way-Star Development using the privacy contact above and, where applicable, to your local data-protection or consumer-privacy authority.

People under 18