Privacy Policy

Last updated: 1 November 2026

This policy explains how Thaw, the operator of ZonitoVisuals, handles personal information through the plugin licensing website, Roblox OAuth sign-in, account linking, and related plugin services. Contact thaw@zoni.to for privacy questions or requests.

Roblox sign-in and permissions

Website login, ordinary account linking, and plugin activation request the openid permission. We use your Roblox user ID to link your accounts and check your licence. The website dashboard displays only the licences associated with the signed-in Roblox account. Signing in does not, by itself, grant a licence.

Purchase verification and inventory access

When you run /whitelist in Discord, the bot gives you a private verification link. That sign-in additionally requests user.inventory-item:read. If you authorize it, our server checks whether you own a qualifying purchase T-shirt. This permission allows the check even when your Roblox inventory is private. The T-shirt query is filtered to the specific purchase asset IDs configured for ZonitoVisuals.

Creator Store plugin ownership is checked separately through Roblox's public inventory API. This check may read pages of your plugin inventory to find the qualifying plugin and currently requires that inventory to be publicly accessible. OAuth inventory permission does not remove that requirement for this fallback. If verification cannot finish, you can try again or contact support. An unsuccessful check does not automatically remove an existing entitlement.

We store the verification result, whether a qualifying T-shirt or plugin was found, and any resulting purchase entitlement. We do not store a copy of your complete inventory. The Discord bot receives your linked account ID and the verification outcome so it can display the result and assign the relevant roles; it does not receive your inventory contents.

OAuth tokens and passwords

Your Roblox OAuth access token is used on our server during sign-in and, when requested, purchase verification. The application does not save OAuth access or refresh tokens for later inventory checks and does not send them to the Discord bot or plugin. The plugin's installation and session credentials are separate credentials issued by ZonitoVisuals, not Roblox OAuth tokens.

Minimal licence data

The licensing service stores the Roblox user ID attached to a licence, installation records, activation times, last-seen times, and security events needed to detect simultaneous use. If you link through the Discord bot, it also stores your Discord user ID and server ID.

What is not requested

The service does not receive your Roblox password. Roblox authentication happens directly through Roblox OAuth.

Why the data is used

The data is used to verify qualifying purchases, link Roblox and Discord accounts, activate licences, assign Discord access roles, limit concurrent seats, revoke leaked installations, investigate repeated licence sharing, and provide support.

We also process licence entitlement sources, installation and session identifiers, pairing requests, and any information you send to support. Network requests include technical information such as an IP address; the hosting provider processes request information to deliver and protect the service, and the application uses IP addresses for rate limiting.

Reasons for processing

Where data-protection law requires a lawful basis, we process information necessary to provide the service under our agreement with you, and rely on legitimate interests for security, abuse prevention, and support. We may retain or disclose information to meet a legal obligation. Roblox asks you to authorize the identity permissions and, for purchase verification, inventory permission described above. That authorization does not permit unrelated marketing.

Plugin data and local backups

The website does not upload, store, or restore your personal plugin library, settings, or themes. These are stored by Roblox Studio through the main plugin or optional storage companion plugins. Portable backups are ModuleScripts that you save and manage yourself.

How identifiers are protected

Stored Roblox and Discord identifiers use authenticated application-layer encryption. Separate keyed blind indexes allow exact account lookups without placing the original IDs in searchable database columns. Decryption happens only inside the licensing Worker for an authorised operation.

How long records are kept

Pairing and Discord-link attempt records, including purchase-verification settings and results, are scheduled for deletion once they have been expired for 30 days; expired attempts may be removed sooner when new requests are created. Security events are scheduled for deletion after 180 days and release-administration history after 365 days. Licence records, purchase and other entitlements, installations, and verified account links are retained separately and are not automatically deleted when an attempt expires. They remain for service and administration until a valid deletion request is completed.

Service providers and sharing

Cloudflare provides hosting, database, storage, and security infrastructure. Roblox processes the sign-in you authorize. Discord is involved when you choose to link a Discord account or use the support bot. Authorized administrators can access records needed for support and licence administration. We do not sell your personal information or use Roblox identity data for targeted advertising. Information may also be disclosed when required by law or necessary to protect the service and its users.

These providers may process information in countries outside your own. Their services and applicable data-processing arrangements govern that processing. See Cloudflare's privacy policy, Roblox's privacy policy, and, if you use Discord, Discord's privacy policy. Contact us for information about the arrangements applicable to your data.

Cookies and local storage

The plugin stores installation credentials, your selected version, and plugin preferences in Roblox Studio settings. The account website uses essential, secure authentication cookies: a login-verification cookie lasting up to 10 minutes and a session cookie lasting up to 8 hours. Signing out invalidates the website session. Website session records contain an encrypted Roblox user ID and a hash of the session token; they do not contain Roblox OAuth tokens. Single-use login handoffs expire after one minute. Expired website authentication records are removed by scheduled daily cleanup. The public pages do not include advertising trackers. Roblox and Cloudflare may use their own cookies for authentication and security; the administration website also uses essential authentication cookies.

Your choices and rights

You can decline the inventory permission. Without it, we may be unable to verify purchases in a private inventory. You can contact support if an automated purchase check is unavailable; declining permission does not itself cancel an existing licence.

You can stop using the service and revoke the app's authorization through your Roblox account settings. Revoking Roblox authorization does not automatically delete records held by ZonitoVisuals or revoke an already issued plugin installation; contact us to request deletion, unlinking, or installation revocation.

Depending on your location and applicable law, you may request access, correction, deletion, restriction, or a portable copy of your personal information. You may object to processing based on legitimate interests. Email thaw@zoni.to; we may need to verify account ownership. Deletion can prevent us from providing licensed access, and limited records may need to remain for legal obligations or resolving disputes. You may complain to your local data-protection authority, including the UK Information Commissioner's Office where applicable.

Age eligibility and updates

Roblox OAuth authorization requires a Roblox account aged 13 or over. This sign-in service is not intended for children under 13. If you believe a child has provided personal information through it, contact us. We will update this page when our practices change and revise the date above.

Read the Terms of Service for the rules governing licensed access.