Privacy Policy

How Varuo collects, uses, stores and protects your information.

Effective: August 20, 2026 Last updated: August 20, 2026

1. Information We Collect

Discord Information

When you use Varuo, including when you sign in or verify your account through Discord, we may process information associated with your Discord account.

Discord User ID;
Discord username;
Discord global or display name;
profile information provided through authorized OAuth scopes;
verification status;
information required to provide Varuo functionality.

Roblox Information

When you link a Roblox account with Varuo, we may process:

Roblox User ID;
Roblox username;
Roblox display name, where available;
verification information;
the association between your Roblox and Discord accounts.

Varuo does not require your Roblox password.

Discord Server Information

When Varuo is installed or used in a Discord server, we may process information necessary for the bot to operate, including server IDs, role IDs, channel IDs, verification settings and other administrator configuration.

IP Addresses

When you access the Varuo website, your IP address may be processed by Varuo or by infrastructure used to operate and protect the Service.

IP addresses may be used for security monitoring, abuse prevention, rate limiting, fraud prevention, troubleshooting and maintaining service reliability.

Server Logs

Our web server, hosting provider, reverse proxy, security systems or other infrastructure may automatically generate technical logs.

These logs may contain:

IP address;
request date and time;
requested pages or resources;
HTTP status codes;
browser or user-agent information;
referrer information, where provided;
authentication events;
security and diagnostic information.

Cookies and PHP Sessions

Varuo may use cookies and PHP session technologies required for authentication, security and normal website operation.

These may be used to maintain your session, protect authentication flows and prevent unauthorized requests.

A session identifier is not intended to contain your Discord or Roblox password.

2. Discord OAuth

Varuo uses Discord OAuth to allow users to authenticate with Discord without providing their Discord password directly to Varuo.

Depending on the permissions and OAuth scopes approved, Discord may provide account information required for authentication and verification.

OAuth credentials or tokens, where used by the system, are treated as security-sensitive information and are not intended to be publicly disclosed.

3. How We Use Your Information

To authenticate users through Discord.
To link Discord and Roblox accounts.
To perform account verification.
To assign Discord roles according to server settings.
To synchronize permitted account information.
To prevent fraud and unauthorized verification.
To detect abuse and security threats.
To maintain, troubleshoot and improve the Service.
To comply with legal obligations.

4. Data Retention

We retain information only for as long as reasonably necessary to provide Varuo, maintain verification functionality, protect the Service and comply with applicable legal obligations.

Security logs and technical information may be retained for a limited period depending on security and operational requirements.

5. Data Sharing

Varuo does not sell your personal information.

Information may be processed by infrastructure or service providers used to operate Varuo, such as hosting, databases, security infrastructure or other necessary service providers.

Information may also be disclosed where required by law or where necessary to protect Varuo, its users or the security of the Service.

6. Data Security

We use reasonable technical and organizational measures designed to protect information against unauthorized access, alteration, loss or misuse.

These measures may include authentication controls, restricted access, encrypted connections where supported, security monitoring and software updates.

However, no Internet service can guarantee absolute security.

7. Your Rights

Depending on applicable law, you may have the right to request access to your personal data, correction, deletion, restriction of processing, objection to certain processing or data portability.

Where processing is based on consent, you may also have the right to withdraw that consent.

8. Data Deletion

You may request deletion of information associated with your Varuo verification through official Varuo support channels.

We may need to verify the legitimacy of a deletion request before processing it.

Certain information may be retained when necessary for security, fraud prevention, legal compliance or dispute resolution.

9. Third-Party Services

Varuo uses or may use third-party services including Discord, Roblox, hosting providers, databases and security infrastructure.

These services operate under their own terms and privacy policies.

10. Changes to This Policy

We may update this Privacy Policy when our services, technology, integrations, security practices or legal obligations change.

The latest update date will be displayed at the top of this page.

11. Contact

If you have questions regarding privacy or personal data, contact Varuo through our official support channels.

Website: https://varuo.xyz

Important: This Privacy Policy should accurately reflect the actual operation of Varuo, including the PHP backend, database, Discord OAuth scopes, cookies, IP logging and any third-party infrastructure used by the Service.