1. Introduction
This Privacy Policy describes how Arleno collects, uses, and protects information when you access Arleno Studio Operations, Arleno Player Portal, or related services at dashboard.arleno.net(collectively, the “Services”). Rustline is a game title on the Arleno platform; references to Rustline in this policy describe game-specific data and community integrations, not the platform operator.
2. Information We Collect
We may process the following categories of information:
Account information
- Email address
- Display name
- Account role and status (for example, active or disabled)
- Sign-in and account timestamps
Roblox linking information
- Numeric Roblox user ID
- Roblox username and display name
- Public Roblox avatar URL
- Link verification method and timestamp
- Acting administrator and reason when an administrator override is used
Discord identity information
- Discord user ID and username
- Link verification method and timestamp
- One-time federation tokens and redemption attempt metadata used to complete linking
Gameplay and operational telemetry
- Game events, session data, and live player state reported by Rustline game servers
- Server heartbeat and integration records
- Inventory and in-game audit event records where applicable
Moderation and support information
- Support tickets, player reports, and ban appeals
- Moderation actions, notes, and related case metadata
- Messages and attachments you submit through support workflows
Security and audit information
- Authentication activity and administrative actions
- Audit logs and game audit events
- IP address or request metadata when produced by hosting or security infrastructure
- Error and security logs
- Discord bot API request records used for rate limiting
3. How We Use Information
We use information to:
- Authenticate users and maintain account sessions
- Link Arleno accounts to Roblox and Discord identities
- Verify identity ownership where supported
- Apply roles, permissions, and access controls
- Operate Rustline gameplay systems and live game intelligence
- Process support tickets, reports, appeals, and moderation cases
- Maintain security, audit, and accountability records
- Operate, troubleshoot, and improve the Services
- Detect misuse and unauthorized access
4. Roblox Account Linking
The Services can associate an Arleno profile with a Roblox identity. Manual entry of a Roblox user ID may be used for display purposes only and does not verify ownership. Verified linking requires OAuth authorization or, in limited circumstances, an audited administrator override.
A linked Roblox account alone does not automatically grant in-game permissions in Rustline. Access is controlled separately through roles and explicit permissions.
5. Discord Identity Federation
Where supported, you may connect a Discord identity by obtaining a one-time link code from the Rustline Discord bot and submitting it through Arleno Player Portal. This process may require a verified Roblox identity first. We store the Discord identifiers needed to maintain the connection and records of how the link was verified.
Temporary federation tokens and redemption attempt records are used only to complete or secure the linking flow. Discord operates under its own terms and privacy practices.
6. Authentication and Service Providers
Account authentication is provided through Supabase Auth. The Services are hosted on Vercel. Application data is stored in Supabase-managed database infrastructure. These providers process information on our behalf as necessary to operate the Services.
When you connect a Roblox account through OAuth, Roblox OAuth is used to confirm the Roblox identity you authorize. Arleno does not receive or store your Roblox password. We receive only the Roblox information authorized through the selected OAuth scopes and information obtained from public Roblox APIs used to refresh profile presentation data.
Transactional email such as sign-in links or password reset messages may be delivered through Supabase's email configuration. If custom SMTP is enabled in Supabase, that provider (which may include services such as Resend) sends mail on our behalf. Arleno application code does not directly integrate with email delivery providers.
Roblox and other third-party platforms operate under separate terms and privacy practices. You should review their policies independently.
7. Gameplay Telemetry
Rustline game servers report gameplay events, session information, and live player state to Arleno infrastructure so staff can monitor operations, investigate issues, and support live game features. This telemetry may include Roblox user identifiers, usernames, server identifiers, and event details relevant to in-game activity.
Game audit events may record administrative or in-game actions for operational review. Retention periods for telemetry categories are described in the Data Retention section below.
8. Moderation and Support Data
When you submit a support ticket, player report, or ban appeal through Arleno Player Portal, we collect the information you provide and associate it with your account and linked identities where relevant. Staff may review this information to respond, enforce rules, and maintain records of moderation decisions.
Moderation records may be retained longer than routine gameplay telemetry when needed for enforcement, appeals, or accountability.
9. Administrative Verification
An authorized Arleno administrator may manually verify a Roblox identity in limited circumstances. When this occurs, the Services record the acting administrator, verification timestamp, method, and reason in audit records.
10. Cookies and Authentication Sessions
The Services use cookies and similar technologies to maintain sign-in sessions, protect authentication flows (including OAuth state and security values), and support essential site functionality. These technologies are used for security and session management rather than advertising.
11. Data Sharing
Arleno does not sell personal information. We may share information with infrastructure providers that help us operate the Services — such as Supabase and Vercel — when required to comply with law, or when necessary to protect the security and integrity of the Services. Information is shared only as reasonably necessary for those purposes.
12. Data Retention
We retain information for as long as reasonably necessary to operate the Services, maintain security, resolve disputes, and comply with applicable legal obligations. Scheduled cleanup jobs apply to certain categories as follows:
- Gameplay events: approximately 90 days
- Live player state records: approximately 6 hours
- Abandoned session records: approximately 7 days
- Identity federation tokens and related redemption attempts: approximately 30 days
- Discord bot API request records: approximately 7 days
Audit logs, game audit events, moderation records, and support case data are not subject to fixed automatic deletion periods and may be retained for as long as reasonably necessary for security, accountability, enforcement, and operational needs.
13. Security
We use administrative, technical, and organizational measures designed to protect information processed by the Services, including access controls, server-side authorization checks, and audit logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
14. Your Choices and Rights
You may remove a Roblox account link from your profile where the Services provide that option. Removing a link clears associated Roblox presentation and verification data from your profile according to current functionality. Self-service unlinking of Discord or Roblox identities may not be available in all cases; contact us if you need assistance.
Depending on where you live, you may have rights to access, correct, or request deletion of personal information we hold about you. To exercise these rights, contact deniedsettings@gmail.com. We will review requests in accordance with applicable law. We do not guarantee automated deletion of all associated records, particularly where retention is required for security, moderation, audit, or legal purposes.
15. Children's Privacy
The Services are not directed to children under 13. We do not knowingly collect personal information from children under 13 through the Services. If you believe a child under 13 has provided personal information, contact us at deniedsettings@gmail.com.
16. International Users
If you access the Services from outside the United States, you understand that information may be processed and stored in locations where we or our service providers operate.
17. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Continued use of the Services after an update constitutes acceptance of the revised policy to the extent permitted by applicable law.
18. Contact
Questions about this Privacy Policy may be sent to deniedsettings@gmail.com. The canonical Services site is https://dashboard.arleno.net.