Privacy Policy

1. Data Controller

rogate.live is operated from Finland. We act as the data controller for any personal data processed through the Service, in accordance with the EU General Data Protection Regulation (GDPR).

2. Data We Collect

• Account data: Your OAuth provider ID, display name, and email address provided by Discord or Google during sign-in.
• Product data: Product names, Roblox gamepass IDs, and Discord webhook URLs you configure. Webhook URLs are AES-256 encrypted at rest.
• Purchase logs: Roblox user IDs and usernames of players who purchase gamepasses through the Service.

3. How We Use Your Data

• To authenticate you and provide access to the Service.
• To verify gamepass purchases via the Roblox API.
• To send Discord webhook notifications on your behalf.
• To display your purchase history and product statistics.

4. Third-Party Services

We use the following third-party services:

• Clerk — authentication (Discord & Google OAuth).
• Neon — PostgreSQL database hosting.
• Upstash — Redis-based rate limiting.
• Simple Analytics — privacy-friendly website analytics (no cookies, no personal data).
• Netlify — hosting and deployment.

5. Data Retention

Your data is retained for as long as your account exists. When you delete your account, all associated products and purchase logs are permanently deleted.

6. Your Rights (GDPR)

Under the GDPR, you have the right to access, rectify, erase, and port your personal data. You may also object to or restrict processing. You can delete your account and all data at any time from the account settings page.

7. Cookies

We use only essential cookies required for authentication. We do not use tracking cookies or advertising cookies. Simple Analytics does not use cookies.

8. Security

Webhook URLs are encrypted with AES-256. All connections use HTTPS. API endpoints are rate-limited to prevent abuse.

9. Changes

We may update this Privacy Policy at any time. Changes will be reflected by updating the date at the top of this page.