Privacy Policy
Last updated 18 September 2026
County Control does moderation, staff management and shift tracking, so it does keep records about people. This page says exactly which ones, why, how long, and how to get them removed.
Who we are
County Control is a Discord bot for Emergency Response: Liberty County (ER:LC) communities, built and run by Phase & Cipher, a small development team. We operate the bot, and the account-linking page at countycontrol.pcdev.info.
The short version
County Control does moderation, staff management, sessions and support tickets, so it holds records about people: who was warned, who applied, who was on duty and when. That is the point of those features. This page lists exactly what is kept, because a vague answer would be no use to you.
What County Control stores
| Data | Why |
|---|---|
| Server ID and settings | Your configuration: log channels, session, ticket and priority setup, roles, toggles |
| ER:LC server-key | The private key your server owner gives us so the bot can read that server's player list and run session commands. It is stored with that server's settings, used only for that server, and never displayed back |
| Moderation cases | Action taken, the target's user ID and name at the time, the moderator, the reason, any duration, whether a DM reached them, and when |
| Staff records | Infractions and promotions (user ID, type, reason, notes, who issued them), leave of absence, private staff notes, and, for any member who sends messages or runs commands, a running count of each and when they were last active |
| Shift records | When a staff member clocked on and off, and their weekly and all-time totals. If they have linked a Roblox account, the bot also reads the ER:LC player list to start and stop their shift automatically |
| Applications | The answers an applicant submits, their user ID, when their account was created, and the decision and who made it |
| Tickets | Who opened a ticket, its type, when, and who claimed it |
| Priority requests and dispatch incidents | The requester's user ID, the Roblox username they entered, their reason, the decision, and the updates logged on an incident |
| Linked Roblox account | Your Discord user ID, Roblox user ID and Roblox username, the server you started from, and when. Held at countycontrol.pcdev.info. See Roblox and ER:LC below |
Where message content is involved
County Control does not keep a copy of every message. It reads messages only to run its commands, and the few places message text is handled are listed here:
- Activity counts. For the staff activity roster, the bot keeps a running count of the messages each member sends and the commands they run, and when they were last active. It counts them and does not keep what anyone said.
- Event logging. If your server turns it on, edits and deletions are posted into a log channel you choose. That copy lives in your server, under your control. We do not keep our own.
- Ticket transcripts. When a ticket is closed, a text transcript is posted to the log channel you configured. It is not kept by us.
- Applications. Applicants answer questions in a direct message with the bot. The bot reads those replies only while an application the person started is in progress, stores the answers as above, and stops listening after 30 minutes of silence or when they type cancel.
Automated screening
County Control does not run automod on your channels. The one place text is screened is staff applications: when someone submits an application, the answers are checked against a built-in list of slurs and by a third-party AI provider, which returns a rating, before staff see them. Only the text is sent (truncated), with no user ID, no username and no server name attached, so the provider has no way to tie it back to a person or a server.
If your server does not use applications, no message text is sent to any provider.
Roblox and ER:LC
Linking a Roblox account. When you link, you sign in to Discord and then to Roblox. We ask Roblox for two permissions, openid and profile, which give us your Roblox user ID and username and nothing else. We cannot act on your Roblox account, see your friends, inventory, messages or anything private, and we never see your password. The link is stored so the bot can recognise you in-game.
One account, one link. A Roblox account can be linked to only one Discord account at a time. That is deliberate, it is what stops one Roblox account being tied to many people.
ER:LC data. With the server-key an owner provides, the bot reads that server's player list, join and kill logs, command logs, moderator calls and emergency calls from the ER:LC API, and can run commands the server's staff ask it to. That data is used to run sessions, priority requests, activity logs, dispatch incidents from emergency calls, shift tracking and abuse alerts for that server. We do not keep the raw logs. They are posted to the channel the owner chose.
What we never do
- We do not store a copy of every message.
- We do not read your direct messages, apart from your replies during an application you started, as described above.
- We do not store your email address, your IP address or any payment details, because we never receive them.
- We do not sell, rent or share anything with advertisers. There are no ads and no trackers.
- We do not use your server's data to train anything.
- We do not ask Roblox for, or store, anything beyond your user ID and username.
Where it is kept
Server records are stored on a server we operate, separated by server ID, so one server's staff cannot see another's. Linked Roblox accounts are stored in a Cloudflare D1 database. Access is limited to the people who run Phase & Cipher, and we look only when we are fixing something or answering you. The AI provider and Roblox, Discord and Cloudflare each handle the small piece described above under their own policies.
How long it is kept
- Moderation cases, staff records and shift totals are kept for as long as County Control is in your server, because a history you cannot look back through is not a history.
- The most recent 500 application submissions are kept. Older ones are cleared on a rolling basis.
- Dispatch incidents keep the latest 100, and each staff member keeps their latest 50 private notes.
- Ticket records are cleared when the ticket is closed.
- An application in progress expires after 30 minutes of silence.
- A linked Roblox account is kept until you ask us to remove it.
- If County Control is removed from a server, that server's data is deleted on request.
Getting data removed
A server owner can ask us to delete everything for their server, and we will do it. An individual can ask what is held about them, and ask for it to be removed, including a linked Roblox account. You can also revoke our access on Roblox at any time from your Roblox connected-apps settings.
One honest caveat: a moderation record exists for the benefit of the server that took the action. If you are asking us to erase a ban reason from a server you were banned from, we will pass that request to the server's owners rather than overrule them, unless the law requires otherwise.
Changes to this policy
If County Control starts storing something it does not store today, this page changes before the feature ships. The date at the top is the honest one.
Contact
The quickest way to reach us is our Discord server. Anything legal or privacy related can go there, and we will answer it.