What this site keeps (contact, login and the room list)

Where it runs

The contact page (support.), the room list (rooms.) and login (account.) run on a server (a small PC) the author keeps at home. It is connected to the outside through a Cloudflare Tunnel, so the home IP address is not exposed.

IP addresses and logs

Your IP address reaches the server through Cloudflare, but the server does not store it. To prevent spamming it only keeps a marker derived from the IP that can’t be turned back into it, and that marker is removed from the server’s database after one day (after the server restarts, it can no longer be matched to any IP). The server’s log doesn’t record IP addresses, email addresses or the text of inquiries either.

What stays, and for how long

• What you send on the contact page (category, subject, text, the reply-to email only if you entered one, game info and language): deleted 30 days after the inquiry is closed. It stays until the author replies and closes it. If you send while signed in, the inquiry is stored linked to your account and shown in your “Your requests” list (not linked if you are signed out).
• A marker used to count receipt-notice emails, so that one address gets at most 3 per day (derived from the reply-to email; it can’t be turned back into it): removed from the server’s database after one day.
• The Discord ID and display name, or the email address, you log in with (both, if you linked Discord; there are no passwords).
• Rooms posted to the room list: they leave the list 3 minutes after updates stop and are deleted after 1 day.
• An action log of who did what and when: 30 days.
• The server’s log: 14 days.

What goes to outside companies

• Email (Resend): the “we received your inquiry” notice to people who entered a reply-to address (only the receipt number; your subject and message are not included; at most 3 per address per day), the “there’s a reply” notice (only when the author chooses to notify by email too; it carries only the receipt number and the name of the person who replied and their team (such as “StarPocket Bug Team”), and the reply itself is not included), login codes, and the notice sent when you link Discord (the Discord display name and the time) are sent through the mail service Resend. The address, subject and the text of that email go to it. Emails to people who sent while signed in include a link to the “Your requests” page (sign-in required to open it).
• The author’s Discord: when a new inquiry arrives, only the receipt number, category and language are posted to the author’s Discord. The subject, the text and the reply-to address are not. If the notice email sent when you link Discord can’t be sent, only that user’s ID (the account number) is posted to the author’s Discord (not the email address, Discord ID or display name).
• Bot check (Cloudflare Turnstile): when you press send on the contact page or the email login, the check token and your IP address are handed to Cloudflare to verify it.

AI-drafted replies

Only inquiries where you ticked “The author may use AI to draft the reply” on the form. If you don’t tick it, the author writes the reply themselves.

To see or delete your data

Ask in a ticket in the “🛡️｜異議申し立て” (appeals) channel of the “PocketRoles 役職部屋” Discord, or at pocketroles.report+[email protected] (subject “Privacy”). You can also use this site’s Contact form under “Privacy”. Details: Privacy Policy.