Account connection

Your connection, explained

RoSync requests Roblox account ID access (openid) and Discord identity access (identify). We keep the two account IDs, the time ownership was proved, server settings, managed-role records and recent audit entries. We check public group memberships and ranks to apply roles and group blacklists. We do not request passwords, cookies, email, private messages, inventory permissions or the ability to change your Roblox account. OAuth tokens are used for identity checks, revocation is attempted immediately, and tokens are never saved. Browser sessions expire after ten minutes or a bot restart. To delete your identity link, use /disconnect in Discord. This also removes your bot-managed roles in servers the bot can access. Failed role removals retain a retry record until permissions are fixed. Audit history is kept for up to 10,000 events and can still contain the account IDs. Your server owner operates this local instance; ask them about stored audit records.