JURISDICTION NOTICE
UK GDPR and Data Protection Act privacy notice. Effective August 5, 2026.
Way-Star Development ("Way-Star Development", "we", "us") operates the Way-Star Development Discord bot, the Way-Star Development administrative portal, and the databases and internal tools supporting those services. The privacy contact is May at ope674cmay@gmail.com.
This notice covers the Discord bot, slash and message commands, Discord account and role synchronization, Roblox account linking and verification, the administrator portal, applications, staffing records, development and quality-control records, leave requests, moderation and disciplinary systems, Internal Affairs and background-check records, payroll allocation records, privacy requests, security logs, and audit trails.
Information may come directly from you, from your interaction with the Discord bot or portal, from Discord and Roblox APIs, from Way-Star Development staff and administrators, from submitted evidence or links, and from automatic security and activity logging.
Depending on your location and the activity, we may rely on consent, performance of a service you requested, legitimate interests in operating and securing Way-Star Development, compliance with legal obligations, and the establishment or defense of claims. Consent is not used as the sole basis when another lawful basis is more appropriate. You may withdraw consent where processing actually depends on consent, but withdrawal does not invalidate earlier lawful processing.
We do not sell personal information. Information may be disclosed to authorized Way-Star Development personnel based on role and operational need, to the person who submitted it where appropriate, to service providers used for hosting, authentication, storage, networking, moderation, and integrations, or when required by law or necessary to protect rights and safety. Providers may include Discord, Roblox, Railway, PostgreSQL hosting, Vercel, GitHub, Trello, and other configured infrastructure. Their own privacy terms also apply to information they independently process.
WEI and its providers may process information in the United States and other countries. Those countries may have different privacy laws. Where applicable law requires transfer safeguards, Way-Star Development will use an available lawful transfer mechanism and reasonable contractual or technical protections.
We keep personal information only while reasonably needed for the purposes described here, legal compliance, security, disputes, investigations, and auditability. As an operating target, routine web request logs should be reviewed for deletion after 90 days; failed and successful login logs after 180 days; closed applications after 180 days unless an active dispute, safety concern, or documented operational need exists; ordinary command-use logs after 180 days; and inactive session or OAuth-state records after they expire. Moderation, payroll, investigation, appeal, security, deletion, and audit records may be retained longer when necessary to preserve accountability or defend decisions. These are retention targets, not promises that override a legal hold or technical backup cycle.
WEI uses role-based access, Discord authentication, session controls, hashed session tokens, HTTPS when correctly deployed, environment-based secrets, database access controls, logging, and audit records. No system can guarantee absolute security. Do not submit passwords, government identifiers, financial account details, medical information, or other unnecessary sensitive information through bot commands, applications, evidence fields, or privacy requests.
WEI does not intend to make solely automated decisions that produce legal or similarly significant effects. Bot permissions and portal access may be automatically updated from Discord roles, but staffing, disciplinary, investigative, and privacy-request decisions are intended to involve authorized human review.
You may submit an access, correction, deletion, or export request at the privacy request form. We may ask you to verify control of the relevant Discord account and may request enough information to locate your records. We may redact another person's information, preserve records subject to an exemption or legal hold, and refuse or limit requests where permitted by law. Authenticated users may download a machine-readable JSON copy of records directly associated with their Discord ID.
We may update this notice when our services, laws, or data practices change. The effective date will be updated for material revisions. You may complain to Way-Star Development using the privacy contact above and, where applicable, to your local data-protection or consumer-privacy authority.
If UK data-protection law applies, you may have rights of access, rectification, erasure, restriction, objection, portability, withdrawal of consent, and rights concerning automated decision-making. A subject access request is normally free. Way-Star Development will respond without undue delay and ordinarily within one calendar month after receiving the request and any reasonably required identity verification. Where legally permitted, a complex request or multiple requests may allow an extension of up to two additional months. Manifestly unfounded or excessive requests may be refused or charged only as permitted by law.
You may complain to the UK Information Commissioner's Office. Official resources: UK GDPR text, ICO subject access guidance, and ICO erasure guidance.
Way-Star Development policy requires every person under 18 to have a parent or legal guardian review and agree to this Privacy Policy before the person uses the Way-Star Development bot, links a Roblox account, submits an application, or uses an authenticated Way-Star Development feature.
Under UK GDPR rules for online services relying on consent, a child under 13 generally cannot provide that consent alone. Way-Star Development's under-18 parent-agreement rule is an additional service rule and does not reduce any stronger protection provided by local law.
A parent or guardian may submit a request on behalf of a minor. Way-Star Development may verify the adult's identity, relationship, and authority. A parent or guardian must not impersonate the minor or submit false consent. Users under 13 may not use data-collecting Way-Star Development features unless Way-Star Development has first completed any legally required verifiable parental-consent process.
We ask minors not to submit unnecessary personal details, private messages, real-world addresses, school information, medical information, or photographs as evidence. Way-Star Development administrators should apply a heightened need-to-know standard to records concerning minors.
DATA REQUEST
You do not need a Way-Star or Discord account to submit a privacy request. Email verification is required before a request enters the review queue.