Privacy Policy

We only collect information necessary to operate the portal securely and verify authorized personnel:

• OAuth2 Account Identity (Roblox & Discord): User ID, username, avatar reference, and group/server role assignments. We do not receive or store your passwords.
• Citizen Submissions: Form data submitted voluntarily via the Reach Out to Staff form or Misconduct Reporting intake (e.g. contact name, handle, topic, incident descriptions).
• Operational Logs: Duty shift timers, incident reports logged by officers, and audit timestamps.
• Technical Logs: IP address and request metadata retained temporarily for sliding-window anti-DDoS protection and security monitoring.

Collected data is used strictly for:

• Verifying security guard ranks, supervisor clearances, and executive command access.
• Synchronizing duty presence with our real-time operational roster and Discord logs.
• Investigating citizen misconduct reports through Internal Affairs.
• Defending portal infrastructure against unauthorized access, payload tampering, and denial-of-service attempts.

We do not sell, rent, or monetize your personal data. We interact with trusted third-party APIs solely to support portal functionality:

• Roblox API / OAuth2: Used to confirm user identities and group rank status.
• Discord API / OAuth2: Used for officer identification and sending departmental event logs via webhooks/bot integration.

We implement defense-in-depth protections including HTTPS encryption, Content Security Policies (CSP), 256-bit cryptographically random session identifiers, sliding-window rate limiting, and atomic data storage.

You may request deletion of stored inquiry logs or session data at any time by contacting our administration at privacy@westpointsecurity.xyz or submitting a formal request via the Contact Desk.