Privacy Policy

1. Data controller

The project is presented as H.A.D.E.S Industries / Site-Ashfall. The person or organization that actually determines the purposes and means of processing must be identified here: [NAME OR LEGAL ENTITY, POSTAL ADDRESS, AND CONTACT METHOD TO BE COMPLETED].

2. Data processed

When you sign in with Roblox, the site receives your numeric Roblox ID, username, display name, profile URL and, if provided by Roblox, avatar URL. The site does not request or receive your Roblox password. If you choose to link Discord, it receives your Discord ID and username. You may also enter an RP character name, which is visible in the public directory.

An application contains the team or role you are interested in and the text you submit. The site stores its review status, dates, and the ID of the staff member who reviews it. Once the server bridge is enabled, the game can send your Roblox ID, username, display name and up to 20 simple `leaderstats` values. Staff assign a faction (chosen from those listed on the site) and rank through the admin console; both fields and the statistics remain in your private file. These game data are received only after the script is installed and enabled in the experience.

3. Public information

The public directory may show your Roblox display name, username, avatar, a link to your Roblox profile and the RP name you chose. Applications, Discord links, rank, faction and statistics are not shown in the directory. Authorized staff may access applications to review them. Do not use real personal information as your RP name.

4. Purposes and legal bases

Data is used to create and secure an account, display the directory, manage applications, operate site features, prevent abuse and notify staff when an application is submitted. The site operator must determine and document the applicable legal bases (such as providing a requested service, legitimate interests, consent or another relevant basis) before public launch.

5. Service providers and recipients

Data is processed by the site operator and staff members who need access. Roblox provides sign-in and public profile information; Discord provides optional identification and may receive an application notification through a staff-configured webhook. The site host is Adkynet, according to information supplied by the operator. Contracting entities, hosting locations and any transfers outside the European Economic Area must be checked against provider agreements.

6. Retention

Account files and applications are stored in the site database. No automatic deletion period or retention schedule is currently configured. Before public launch, the operator must set appropriate periods for inactive accounts, closed applications, security logs and backups. You may request access, correction or deletion by contacting H.A.D.E.S Industries through the community Discord; automated account deletion is not yet available.

7. Your rights

Depending on where you live and the applicable law, you may request access, correction, deletion or restriction of your data, object to certain processing, or request portability of eligible data. You may also complain to the competent data protection authority, including the CNIL where it has jurisdiction. To exercise a right, contact the publisher using the address that must be added to the legal notice.

8. Cookies and local storage

The site uses a session cookie required for sign-in and form protection. On HTTPS, the cookie is configured as secure, inaccessible to JavaScript and limited to this site. A CSRF token is kept in the server-side session. Your language preference is stored in your browser local storage. The site does not currently set advertising or analytics cookies. Google Fonts and Roblox avatar/thumbnail resources may transmit technical connection data to their providers when loaded by your browser.

9. Security and incidents

The site uses server-side sessions, prepared database statements, CSRF protection for authenticated actions and HTTPS connections to providers. No system can guarantee absolute security. The operator should keep software updated, limit staff access, protect backups and handle incidents according to applicable requirements.

10. Intended audience and updates

The site is intended for people aged 16 and over. It does not currently ask for a date of birth or proof of age and therefore does not verify visitors’ ages. This policy may change as features evolve and will be updated after significant changes. Last updated: October 4, 2026.