Privacy notice

What this portal stores

Your username, first name, surname, date of birth, member-supplied Roblox ID, securely hashed password and recovery code, optional Roblox and Discord usernames, and the applications, reports and enquiries you send. Registration and last-login IP addresses, login times and access restrictions are recorded for website security and are available only to administrators. Sign-in activity and staff actions are recorded to support account and community administration. Your verified Discord ID is used to send private service notifications for your own submissions and account changes. Notification delivery logs contain event types, references and delivery status; passwords, recovery codes and staff-only notes are not included in Discord messages.

Account linking and security reviews

Roblox linking verifies control through Roblox OAuth. We store the verified user ID, username, account creation time when available and verification time. Discord and Roblox access tokens are not saved. Changing a typed Roblox ID removes its verified status. Linked IDs support membership roles and duplicate-account reviews.

Registration and successful-login network addresses are retained as readable IP addresses and keyed hashes for administrator-only overlap checks for 30 days since last observed. The existing raw registration and last-login IP fields are cleared after 30 days. Link-change history and internal membership review notes are retained for 90 days. Cleanup runs at startup and every 30 seconds while the server runs; backups have their own retention. Security hashes remain personal data. Administrators review matches; a shared network does not automatically suspend an account. The administrator DNA blacklist compares Discord IDs, Roblox IDs and names against stored account details and retained identity history. Active blacklist entries are retained until removed by administrators. Flags and delivery history are retained for 90 days after clearing or delivery creation respectively. Flag alerts are sent to the configured Discord channel with an account reference and a reviewer role mention; raw IPs, names and internal blacklist reasons are kept in the administrator panel. No persistent device fingerprints or optional tracking cookies are collected.

Who can see your information

You can see your own profile and submissions. Your date of birth is visible to you, website administrators and authorised Command staff within their personnel access scope and is not included in Discord notifications. Community staff and administrators can review submissions and the usernames supplied with them. Staff notes are restricted to the staff team.

Force Management also stores service memberships, ranks, resource status, fictional incident logs and internal roleplay records. These records are visible within the assigned service; service controllers and command have additional operational permissions. Website administrators can access all three services. Original internal records and attributed amendments are retained for accountability.

Cookies

One essential session cookie keeps you signed in and protects forms. It expires after 12 hours. The website does not include advertising or analytics trackers.

Managing your information

You can change your linked contact usernames from your account. Use Contact HR to ask the community administrator about access, correction or deletion of your records. Other community records are retained until the administrator removes them; the security retention limits above apply to membership security records.

Roleplay only

Do not provide real-world sensitive information, medical records or financial details. Typed contact usernames are not proof of ownership. The linked accounts page identifies accounts verified through OAuth.