SC
SEMPER COMMUNISLegal & Privacy
PrivacyTermsImpressum

PRIVACY / DATENSCHUTZ

Privacy Policy

Effective 23 August 2026Public document

How Semper Communis handles identity, profile and group data received through Roblox OAuth 2.0.

Scope transparency

Semper Communis requests only openid, profile and group:read. It does not request write access to a Roblox account or group.

openidIdentity

Stable Roblox user ID used for sign-in and session assignment.

profilePublic profile

Username, display name, profile and avatar information supplied by Roblox.

group:readGroup access

Read-only group, membership and role information used for authorization and administrative context.

01

Controller and contact

The controller responsible for processing personal data through Semper Communis is:

Timo Steinke
Ant Waterwark 22b
26524 Hage
Germany

Email: [email protected]

02

Data we receive

Roblox OAuth data

When you authorize the application, Roblox may provide your stable Roblox user ID, username, display name, profile URL, avatar or profile image URL and other profile claims included in the profile scope. The group:read scope may provide read-only group records and group-related information made available by Roblox, including group identifiers, names, membership or role information where required by a Semper Communis feature.

Technical data

When this website is accessed, the delivery and hosting infrastructure may process IP address, timestamp, requested URL, referrer, browser identifier and basic error or security information. Semper Communis does not use advertising cookies or third-party analytics on this website.

03

Why we process data

  • authenticate you securely with your Roblox account;
  • associate the browser session with the correct Roblox user;
  • verify group-based access, membership or role permissions;
  • provide protected Semper Communis tools and documentation;
  • prevent abuse, investigate failures and protect the service; and
  • comply with legal and Roblox platform obligations.

We do not sell Roblox data, use it for advertising, combine it with third-party profiles, or use it to train artificial-intelligence or language models.

04

Legal bases

Where the GDPR applies, processing is based on your authorization and consent where required (Article 6(1)(a)), performance of or steps related to use of the service (Article 6(1)(b)), our legitimate interests in secure and reliable operation (Article 6(1)(f)), and compliance with legal obligations (Article 6(1)(c)). You may revoke Roblox authorization at any time; this does not affect processing already performed lawfully.

05

OAuth, cookies and storage

The authorization flow uses secure, HTTP-only state, PKCE verifier and return-path cookies for up to ten minutes. After successful sign-in, an encrypted, HTTP-only session cookie containing the Roblox user ID and the profile fields needed for display is valid for up to 30 days. Logging out removes this cookie from the browser.

OAuth access tokens are used only to communicate with Roblox APIs for the authorized request and are not stored in a separate application database by the current website. The current website likewise does not maintain a separate permanent database of Roblox profile or group information.

06

Recipients and infrastructure

Data is exchanged with Roblox solely through the official OAuth and Open Cloud APIs. Cloudflare provides network delivery and security services, and the service is hosted on infrastructure operated for Semper Communis. These providers may process technical data only as needed to deliver and protect the service. We do not disclose Roblox identifying data to advertisers, data brokers or unrelated third parties.

07

Retention

OAuth flow cookies expire after ten minutes and the encrypted session expires after 30 days unless removed earlier. Web-server logs rotate daily and are ordinarily retained for no more than 14 rotations. Data may be kept longer only when reasonably necessary to investigate a security incident, establish or defend legal claims, or comply with law.

08

Your choices and rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability or objection, and may lodge a complaint with a competent data-protection authority. Contact [email protected]. You may also log out, delete the session cookie, or revoke the application from your Roblox account settings.

09

Children

Semper Communis does not intentionally request information beyond the selected Roblox scopes and does not knowingly use children's data for advertising or profiling. Where consent by a parent or guardian is required by applicable law or Roblox settings, the service must only be used with that authorization.

10

International processing and changes

Roblox and infrastructure providers may process data outside your country. Where required, legally recognized safeguards apply. We may update this notice when the service, scopes or legal requirements change. The effective date at the top identifies the current version; material changes will be communicated appropriately.

DEUTSCHE ZUSAMMENFASSUNG

Datenschutzhinweise

Verantwortlicher ist Timo Steinke, Ant Waterwark 22b, 26524 Hage, Deutschland, [email protected]. Semper Communis nutzt Roblox OAuth mit openid für die Benutzer-ID, profile für die von Roblox bereitgestellten Profildaten und group:read ausschließlich für lesende Gruppen-, Mitgliedschafts- und Rollenprüfungen.

Die Daten werden zur Anmeldung, Zugriffssteuerung, Bereitstellung und Absicherung des Dienstes verarbeitet. Es erfolgt kein Verkauf, keine Werbung, kein Drittanbieter-Tracking und kein KI-Training mit Roblox-Daten. OAuth-Hilfscookies laufen nach zehn Minuten und die verschlüsselte Sitzung nach spätestens 30 Tagen ab. Betroffenenrechte können über die genannte E-Mail geltend gemacht werden; die Roblox-Autorisierung kann außerdem jederzeit in den Roblox-Kontoeinstellungen widerrufen werden. Die englische Fassung enthält die vollständigen Einzelheiten.

Semper CommunisOperated by Timo Steinke · Germany
HomePrivacyTermsImpressum
Privacy Policy – Semper Communis