Privacy Policy for Arbastro

When you create an arbastro account, we collect and store the following:

• Email address (used for sign-in, verification, password reset, and account notifications)
• Hashed password (we never store your plaintext password)
• Discord user ID, username, global name, and avatar URL — received via Discord OAuth2 when you link your Discord account
• Roblox user ID, username, and display name — received via Roblox OAuth2 or our in-game code verification flow
• arbastro account username (chosen by you)
• Audit history of changes you make to linked accounts (for security and dispute resolution)
• Optional 2FA secrets (if you enable TOTP) and passkey credentials (if you register one)

We never request more permissions from Discord or Roblox than necessary. We do not access your DMs, friend lists, inventory, or messages.

If you subscribe to arbastro Suite or use the metered friendpath public API:

• Payment is processed by Stripe, Inc. We do not store your full card number, expiry, or CVC
• We store your Stripe customer ID, subscription status, plan, and renewal/cancellation dates so we can grant or revoke access
• API key prefixes and SHA-256 hashes (the full key is shown to you once and never stored in plaintext)
• Per-call API usage records: timestamp, endpoint hit, status, billed cost, and request metadata such as the usernames/IDs you queried

We log account lifecycle events (signup, account activation, link/unlink of Discord or Roblox, email or username change, subscription change) to a private internal Discord channel for fraud prevention, support, and abuse investigation. Only authorized arbastro staff have access to this channel.

• Supabase, Inc. — authentication, database, and session management
• Stripe, Inc. — payments and subscription billing
• Resend (Resend Inc.) — outbound transactional email (verification, password reset, billing receipts)
• Discord Inc. — when you link your Discord account or join our servers
• Roblox Corporation — when you link your Roblox account or use friendpath services
• Vercel Inc. — hosting and edge infrastructure
• Cloudflare Inc. — DNS for arbastro.com and subdomains

Each processor is bound by their own privacy policy and data-processing terms. We share with them only what is necessary to operate the service.

• You can view your linked accounts and audit history in your account settings at any time
• You can add, swap, unlink, or change linked Discord and Roblox accounts (multiple per type, with one designated primary)
• You can link or unlink external connections (GitHub, YouTube, X/Twitter, Reddit, Facebook, TikTok, Instagram) at any time
• You can choose, per-link, whether each linked account is publicly displayed on your profile or hidden
• You can toggle whether your arbastro profile appears in the public account directory at all
• You can change your email (with verification) and username; we keep a redacted record of previous values for security/fraud purposes
• You can permanently delete your arbastro account directly from settings → profile → danger zone, with multi-step confirmation

When you permanently delete your arbastro account, the following happens immediately and irreversibly:

• Your profile, username, bio, avatar, and all linked-account records are erased from our database
• Your authentication identity (email, hashed password, MFA factors, backup codes, OAuth identity links) is deleted from Supabase Auth
• Your activity history rows are deleted (a single redacted "account_deleted" event is retained as an audit-trail noting only the deletion timestamp)
• Active arbastro Suite and FriendPath Scan API subscriptions are canceled immediately at Stripe (no proration; you retain access only through the end of any already-paid period)
• API keys are revoked instantly — any external apps using your keys stop working
• The arbastro Suite Discord role is removed from your linked Discord account
• Roblox game integrations querying your Suite status report you as having no Suite from that moment
• External connections (GitHub, YouTube, etc.) are unlinked from arbastro but the underlying accounts on those platforms are unaffected — you must revoke arbastro's authorization separately on each provider if you want

We do not issue refunds for the unused portion of an active subscription on user-initiated deletion. If you believe you are owed a refund (e.g. you deleted accidentally), email [email protected] within 7 days.

If your account is set to public, the following information is visible to anyone (logged in or not) at arbastro.com/users/<your-username>:

• Your username, avatar, bio, role badge (user/staff/owner), and joined-on month
• Each of your Discord, Roblox, and external connections that you have individually marked as public
• Roblox accounts also display the public Roblox headshot for that user

Email, phone, payment information, IP address, MFA factors, audit history, and any link you've marked private are never shown publicly. You can switch your entire profile to private from settings → profile at any time.

If you link a Discord account and join the arbastro Discord server, our bot will automatically grant or revoke a "Suite" role on your Discord account based on your subscription status. The bot reads only your linked Discord user ID (which you provided during account linking) and writes only to that role. We do not read your Discord messages, friends, or private servers.