Legal // Document 02

Privacy Policy

Last updated: July 20, 2026

This Privacy Policy explains how Velarium Industries ("Velarium", "we", "us", or "our") collects, uses, and protects information when you use our website, member portal, and associated services (the "Service"). By using the Service, you consent to the practices described in this policy.

1. Information We Collect

When you authenticate and link accounts through the member portal, we collect only the information necessary to identify you and operate the Service:

• Discord account data: your Discord user ID, username, and avatar reference, obtained through Discord OAuth (the "identify", "guilds", and "guilds.join" scopes). If you grant it, we also store your Discord access and refresh tokens, encrypted at rest, so that we can add you to Discord servers you consent to join.
• Discord server membership: records of the Discord servers you are added to through the Service, and the list of servers your account belongs to (read through the "guilds" scope) to show which you can still join.
• Roblox account data: your Roblox user ID and username for your linked main account and, if provided, one alternate account, obtained through Roblox OAuth (the "openid" and "profile" scopes). We also display your public Roblox avatar image, which is served by Roblox.
• Google account data (optional): if you choose to link a Google account, your verified email address and Google account identifier, obtained through Google OAuth (the "openid" and "email" scopes). This is used to add you to Google Groups.
• Group membership: records of the Google Groups you are added to through the Service.
• Session data: a session identifier stored in a cookie to keep you logged in.

We do not collect your password for any third-party platform, payment information, or your precise location through the portal. A Google email is collected only if you choose to link one; it is optional.

2. How We Use Information

• To authenticate you and maintain your logged-in session;
• To link and display your connected Roblox, Discord, and Google accounts, including avatars;
• To add you to, and remove you from, Google Groups when authorized;
• To add you to Discord servers you consent to join, either from the portal or on acceptance of an application;
• To determine management permissions from your rank in the relevant Roblox group;
• To operate, maintain, and improve the Service and community features;
• To enforce our Terms of Service and prevent fraud or abuse, including detecting duplicate or unauthorized account links and rate-limiting Discord account changes;
• To comply with legal obligations.

3. Legal Basis

Where applicable law (such as the GDPR) requires it, we process your information on the basis of your consent, which you provide by authorizing the OAuth connections, and our legitimate interest in operating a secure community service. You may withdraw consent at any time by requesting account deletion (see Section 7).

4. Third-Party Services

We use the following third parties to provide the Service. Their handling of data is governed by their own privacy policies:

• Discord: authentication, community, avatar images, and server membership management.
• Roblox: authentication, gameplay, group ranks, and avatar images.
• Google: optional email linking and Google Groups management.
• Railway: application hosting, database hosting for account and session records, and file storage for content uploaded through the portal.

5. Cookies

We use a single, strictly necessary session cookie to keep you authenticated. It does not track you across other websites and is not used for advertising. Disabling this cookie will prevent you from logging into the portal.

6. Data Retention and Security

We retain your account and link records for as long as your account remains active. Data is transmitted over encrypted connections and stored with our hosting providers using industry-standard safeguards. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, or delete the personal information we hold about you, and to withdraw consent. To exercise these rights, including deletion of your account and linked data, contact us through the community Discord server. We will respond within a reasonable timeframe.

8. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us so we can delete it. Where required, children should only use the Service with parental or guardian consent.

9. International Users

Your information may be processed and stored in countries other than your own. By using the Service, you consent to the transfer of your information to facilities and service providers that may be located in jurisdictions with different data-protection laws than yours.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be indicated by updating the "Last updated" date above. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

11. Contact

Questions about this Privacy Policy or your data may be directed to us through the community Discord server.