Privacy Policy
Last updated: March 7, 2026
This Privacy Policy explains how Granatly collects, uses, stores, and discloses information when you use the Granatly website, dashboard, authentication flow, Roblox verification flow, and related ER:LC community management features.
1. Scope
This Privacy Policy applies to the Granatly website, dashboard, APIs, Discord login flow, Roblox verification flow, analytics, logging, moderation-support tooling, and server configuration features made available through Granatly.
2. Information we collect
Depending on how you use Granatly, we may collect and process the following categories of information:
- Discord account information, such as your account identifier, username, profile metadata supplied by the authentication provider, and guild access relationships.
- Guild and server configuration data, including ER:LC server identifiers, guild identifiers, selected channels, selected roles, rules, welcome messages, verification settings, log channel settings, playercount settings, and session settings.
- Verification-related information, including Roblox account identifiers or usernames linked during the verification flow and timestamps showing when a verification was completed.
- Operational and activity data processed by Granatly features, including logs, analytics, playercount points, moderation-related records, rule activity, warning data, bans data, outages data, and related timestamps.
- Request and device metadata required for security and operations, including IP-derived request data, timestamps, route access patterns, and session information used for authentication, CSRF protection, and rate limiting.
3. How we collect information
- Directly from you when you sign in, verify an account, submit or update settings, or use dashboard functionality.
- From Discord through the OAuth login flow and guild-related metadata available to authorized integrations.
- From Roblox verification flows when you choose to connect and verify a Roblox account.
- From ER:LC-related activity and Granatly-managed data sources used to power logging, moderation, and analytics features.
- Automatically through browser and server interactions required to secure and operate the service.
4. Why we use information
- To authenticate users and determine whether a user is authorized to access a guild or ER:LC server configuration.
- To provide dashboard functionality, save configuration, and operate logging, verification, moderation, analytics, and automation features.
- To maintain service integrity, detect abuse, enforce security protections, troubleshoot issues, and prevent unauthorized access.
- To process account verification, maintain verified status, and enable features that depend on linked Roblox account data.
- To maintain auditability of dashboard actions and operational changes performed through the service.
5. Legal bases and permissions
Where applicable, Granatly processes information because it is necessary to provide the services you request, to protect the security and integrity of the platform, to pursue legitimate operational interests, and based on your actions in choosing to authenticate, verify, or submit data through the service.
By using Granatly on behalf of a guild, you represent that you are authorized to submit and manage the data you configure through the service.
6. Cookies, sessions, and security protections
Granatly uses authentication/session cookies and related storage mechanisms necessary to keep users signed in, protect authenticated routes, and maintain secure sessions. Granatly also uses security protections such as request validation, rate limiting, and request-origin checks to help prevent abuse and unauthorized access.
7. Sharing and disclosure
Granatly does not sell personal data. We may share or disclose information only in the following limited circumstances:
- With infrastructure and hosting providers, including Supabase and other service providers used to run authentication, storage, and application functionality.
- With Discord, Roblox, and other integrated services when required by the functionality you actively use.
- With authorized guild/server operators and authorized users who are permitted to access the relevant Granatly dashboard data.
- When disclosure is required to comply with applicable law, legal process, enforceable governmental request, or to protect rights, safety, and service integrity.
8. Data retention
Granatly retains information for as long as reasonably necessary to provide the service, maintain operational records, enforce security, comply with legal obligations, resolve disputes, and support legitimate business and platform operations. Different categories of data may be retained for different periods depending on operational need, contractual requirement, or legal obligation.
9. International processing
Your information may be processed and stored in jurisdictions other than your own, depending on where Granatly or its service providers operate infrastructure. By using the service, you understand that information may be transferred to and processed in such jurisdictions subject to applicable safeguards and provider practices.
10. Your rights and choices
Depending on your location, you may have rights relating to access, correction, deletion, restriction, objection, portability, or complaint regarding your personal information. Because Granatly may process data on behalf of guild/server operators or in connection with third-party platform records, some requests may need to be verified, limited, or directed to the relevant controller or platform.
To request review or deletion of data associated with your account, you should provide enough identifying information to safely locate the records, such as your Discord user ID, relevant guild ID, and, where applicable, your Roblox account identifier.
11. Children
Granatly is not intended to knowingly collect personal information from children in violation of applicable law. If you believe personal information has been provided unlawfully by a minor, a request for review or deletion should be submitted by an appropriate parent, guardian, or authorized representative.
12. Changes to this Privacy Policy
Granatly may update this Privacy Policy from time to time. Updated versions become effective when posted on this page unless a different effective date is stated.
13. Contact
If you need to submit a privacy-related request, you should use the official Granatly support or operator contact channel made available for the service and include sufficient identifying information for the request to be reviewed safely.