Your information. Your choices.

Who is responsible

SGVRP | Squid Game Variety Roleplay is operated by Bira Ionut, based in Romania. This operator is responsible for the personal information described in this notice.

Privacy requests can be made from My account or by emailing privacy@squidgamerp.com. You do not need to join our Discord server or remain a community member to exercise your rights. Ordinary game and community support is available through Discord tickets.

What we collect

Discord supplies your user ID, username, display name and avatar when you sign in. We also check your membership and roles in SGVRP community servers. We do not request your Discord password, email address or private message history.

When you link Roblox, we receive your user ID and available profile information, including your username, display name and image. We record the verification provider, profile checks, and linking and unlinking dates. Direct Roblox authorization also provides a credential for profile updates. Neither Roblox nor Bloxlink verification gives this service your date of birth or verified age.

Applications contain your verified Discord and Roblox identities, the listing terms, your answers and attachments. Recruiters add decisions and reasons. We keep interview arrangements, necessary cancellation details, Squidbox letters and read status, and privacy requests.

When you save an opportunity, we store its listing reference with your account so your saved list is available on your other devices. Listing authors and ownership also have submission and approval records for the opportunities they manage.

Security records cover sign-in sessions, account activity and misuse prevention. For uploads, this includes file details, scan outcomes and access or restriction records. Our hosting providers also process connection and diagnostic information, such as IP addresses and request details.

You can read public pages without an account. Discord identity and SGVRP community membership are needed for account services; a verified Roblox link and the required application fields are needed to apply. Optional listing-visit sharing is never required.

Your linked Roblox profile

My account shows your verified Roblox link, its provider and retained link history. When using Bloxlink, we send your Discord user ID and the SGVRP server ID to Bloxlink to check the Roblox account associated with your Discord identity. We obtain public profile details from Roblox. This does not authorize SGVRP to control your Roblox account.

Linked profile information is checked periodically. You may need to confirm the connection again if authorization expires, is revoked, or your Bloxlink account association changes. Changing an account through Bloxlink does not silently replace an existing SGVRP connection or a submitted application.

Unlinking in My account stops profile updates. Authorization information needed to disconnect the service is deleted within 24 hours. Link history is kept for 180 days after unlinking, unless an applicable privacy request removes it earlier.

Authorized recruiters may review relevant link history with an application to understand account changes and investigate identity or restriction issues. You can view your own records in My account and your data export.

Listing visits and your choice

Careers counts listing visits to understand activity. These totals count visits, not unique people, and do not identify visitors to recruiters. Aggregate records expire after 365 days.

If you declare that you are at least 18, you can separately agree to share your identity and visit with the authorized recruiting team for a particular listing. This choice applies only to that listing. Named records are kept for up to 90 days.

You can withdraw on the listing and remove its named visit record. Refusing or withdrawing does not prevent browsing or applying and must not be used against you. If you are younger than 18 or unsure, leave sharing off. This declaration is not verified age information from Roblox.

Saved opportunities and listing contacts

Saved opportunities are private to your account and are not shared with recruiters as a signal of interest. Saving is optional, does not submit an application and does not enable named listing-visit sharing. Remove a saved opportunity at any time; saved references are also removed when your account or the listing is deleted.

A listing may display an agreed recruitment contact with their Discord name, profile image and Discord contact link. Contact details are public while shown on the listing. Eligibility and profile changes take effect when the connection updates. Staff can ask the recruiting team or privacy@squidgamerp.com to correct or remove their contact details.

Sharing a listing shares its public address, not your saved list or private application. Discord handles conversations opened through contact links under its own privacy notice.

Purposes and legal grounds

We rely on performance of a contract for account services, your saved opportunities, requested correspondence and engagement steps where the information is necessary for an agreement with you or steps you request before one. Agreed payment details are recorded before paid activity begins.

Role checks, security records, relevant identity history, listing approval and recruitment review support our legitimate interests in protecting members, preventing misuse and running fair recruitment. Upload validation and automated malware, safety and applicable content checks support these same protective interests. Aggregate listing activity helps improve recruitment; public leadership profiles and agreed recruitment contacts help members reach the right team. We balance these interests against your rights, especially those of children, and you can object.

Optional named listing visits rely on your separate consent, which you can withdraw without affecting earlier lawful processing. We use information to meet legal obligations only when an applicable law requires it. We do not sell personal information or use application answers for advertising.

Recruitment access and restrictions

Applications are available to you, authorized recruiters for that department and ownership. Provide only information relevant to the role. Do not submit passwords, identity documents, medical records, financial account details or unrelated private information.

Department restrictions contain account identifiers, the department, a reason and review information. An active restriction automatically prevents an application to that department. Authorized reviewers may consider relevant restrictions from other departments, but these do not automatically reject you elsewhere.

Final recruitment decisions are made by people. If a restriction is inaccurate, outdated or matched to the wrong account, contact us for correction and human review. You can also request restriction of processing. Using your privacy rights must not count against you.

Uploaded files and security checks

Where an application or form accepts uploads, files may be automatically processed by third-party security services for malware detection, file safety, inappropriate-content checks where applicable, and abuse prevention. Processing can happen before recruitment staff are allowed to access the file.

We use Verisys Antivirus API by IonX Solutions for these checks. We send the uploaded file and only the information reasonably necessary to scan it, not the rest of your application or unrelated answers. We use its EU processing endpoint for uploaded files. The provider processes those files on our instructions under its Data Processing Agreement.

Files or associated applications may be quarantined, restricted, rejected or removed when a security, safety or policy concern is identified. Scans can make mistakes, and a content flag does not determine whether material is unlawful. A scan does not itself decide whether you are suitable for a role. Contact privacy@squidgamerp.com about an inaccurate result, an access problem or an alternative way to provide relevant information. We do not promise manual inspection of every flagged file.

The provider describes using irreversibly anonymized, non-identifying scan metadata to improve detection. This does not authorize SGVRP to use your application answers for advertising or unrelated purposes. Our retention and privacy-rights sections also apply to uploaded files and associated records.

Interviews and correspondence

Interview arrangements are shared with the applicant, assigned interviewer and authorized recruitment staff. Give only a brief reason when cancelling; a medical history is not required.

Squidbox holds community letters, recruitment outcomes and interview information. When enabled, Discord notifications say that a letter is available without including its private contents or application answers.

How long information is kept

We keep information only as long as it is needed for its stated purpose. The periods below start scheduled removal; a valid privacy request or an ended purpose can require earlier deletion.

Unsubmitted uploads: 24 hours. Closed applications and associated interviews: 180 days. Ordinary letters: 365 days. Security audit entries: 180 days. Completed notification delivery records: 30 days. Linked-account history and listing visits follow the periods explained above; sign-in storage follows the cookie notice.

Active department restrictions require review within 180 days and expire unless a continued need is justified. Inactive restriction records expire after another 180 days. Accounts unused for 730 days enter deletion. Minimal deletion receipts remain for 730 days after completion. A limited preference record remains as needed to prevent a removed public team profile being republished; contact us to change it.

Specific records may be kept with restricted access for a legal obligation or legal claim. Each exception expires within 180 days unless a continued need is reassessed and justified. We explain any exception affecting your request. Retained copies are removed when the exception ends; its administration record remains for 180 further days.

Hosting logs and backups follow provider retention schedules. Removing live data does not immediately erase every backup; recorded deletions are reapplied before restored data returns to ordinary use. Contact us for the retention details applicable to your data. Where required, we notify recipients of corrections, restrictions or deletions.

Your rights and how to use them

You can request access, correction, deletion or restriction, object to processing, and ask for data portability where applicable. You can withdraw consent for an optional use. These rights depend on the purpose and legal ground.

Use My account to export your data or request deletion. For any privacy right, an accessible copy or help without sign-in, email privacy@squidgamerp.com. Include enough information to locate your record. We ask for additional identity information only if reasonably needed; do not send identity documents unless a suitable process has been agreed.

We respond without undue delay and normally within one calendar month. If complexity or the number of requests requires up to two further months, we explain the extension within the first month. Requests are normally free. If we cannot grant a request fully, we explain why and how to challenge the decision.

What account deletion means

Deletion removes your website profile, sessions, application answers and uploads, letters, saved opportunities, linked-account history and named listing visits unless a lawful exception applies. Active applications and interviews end. Roblox authorization information is removed as explained above. Signing in again cannot recover erased records.

Confirmed deletion has no recovery period. After processing finishes, you may sign in to create a new website account. For a temporary break, keep your account and sign out instead.

Other people's records are not deleted just because you interacted with them. Unneeded references to you are removed or replaced, and any lawfully retained information has restricted access. Recruiters lose access to deleted answers and attachments.

An SGVRP deletion request does not delete your Roblox, Discord or Bloxlink account, or records those services hold independently. Manage those accounts with the relevant provider.

Children and age eligibility

Membership starts at 13, subject to higher requirements under your local law or the platforms you use. Positions can require a higher age. Community membership does not establish eligibility for paid work.

If an online service relies on consent and you are below the applicable digital-consent age, parental authorization is required. That age varies by country. A Discord account or checkbox does not prove authorization. Contact us before applying if your eligibility or required permission is uncertain.

We do not routinely collect exact dates of birth or identity documents. Recruitment questions must suit the role and age group. Paid work and contracting requirements are checked separately.

Providers, public profiles and transfers

Vercel hosts the website. Supabase stores account records and private files. Discord provides sign-in, membership information, profile images and optional notifications. Roblox provides direct linked-account verification, public profile information and game statistics. When selected for account linking, Bloxlink supplies the Discord-to-Roblox association under its own privacy notice at blox.link/legal/privacy-policy. Authorized administrators and providers have access only for their responsibilities.

Verisys Antivirus API by IonX Solutions processes uploaded files for the security and applicable content checks described above. This disclosure concerns file scanning; it does not mean the provider receives the entire application.

The public team page displays leadership names, roles and available profile images from Discord. Agreed recruitment contacts may also appear on public listings. Loading provider-hosted images sends connection information to that provider. Applications, saved opportunities and private letters are not published.

Providers may process data outside the European Economic Area. International transfers require an applicable adequacy decision or safeguards such as standard contractual clauses. Email privacy@squidgamerp.com for the safeguards applicable to your data and a copy. An EU database region does not mean all provider processing stays in the EU.

Concerns and complaints

Contact privacy@squidgamerp.com about a privacy concern. You may also complain to the Romanian supervisory authority, ANSPDCP, at www.dataprotection.ro, or the competent authority where you live, work or believe a breach occurred. You may seek a judicial remedy where applicable.

We update this notice when our processing changes. Material changes will be explained before information is used for a new purpose.