Privacy Policy

Last updated: October 22, 2026 (version 2026-10-22)

Klyro (“we”, “us”) is a hobby project run by an individual in New York, USA. It provides staff-management tools for Discord and Roblox communities. This policy explains what information we handle, why, who else is involved, and the choices and rights you have. We've tried to write it in plain language.

The short version

• We collect only what's needed to run Klyro. We have no advertising, no analytics trackers and no data sales.
• Nothing is loaded from other companies until you choose. A privacy banner asks first. Signing in needs our sign-in provider (Clerk); live chat support (Psstly) is optional and off unless you allow it.
• You must be at least 13, and if you're under 18 you need a parent or guardian's permission.
• You can download your data and delete your account yourself in Settings, or email us.

What we collect

• Your account: your Klyro username, an identifier from our sign-in provider (Clerk, which handles your email, password or social login; we never see or store your password), when you created the account and last signed in, which version of these terms you agreed to and when, and your notification choices.
• Discord and Roblox accounts you connect: your Discord ID, username and avatar, the list of servers you manage; your Roblox ID, username, avatar and the groups you're in. We keep an access token so we can refresh the lists you asked us to show. You can disconnect these at any time.
• Community information: what members and Owners put into a community: shifts and hours, tasks, handbook acknowledgements, training progress, moderation log entries (including the names of players), applications and appeals (including the answers people give), notes, recognition, sessions and time off. Each community's Owner decides what their community records; see “Communities” below.
• Pictures: logos and background pictures that a community's Owner uploads. A background is shown to anyone who can see that community's pages, and on its public application and appeal pages. Don't upload anything you wouldn't want the public to see.
• News you've seen: Klyro and community Owners can post updates. We remember which ones you've read or put off, so you aren't shown the same one again. Pictures on updates are viewable by anyone who has the picture's link.
• Your application history: a list of the applications and ban appeals you've sent to communities and whether they were answered, so you can see them on your account page.
• Notifications: short messages about things that involve you (for example a task assigned to you or a decision on your application), the newest 100 at a time, and your choices about which kinds you want. You can clear them in Settings.
• Connections a community's Owner turns on: Discord channel posts, where Klyro posts selected events (such as an announcement, a new session, or that an application is waiting, never what the person wrote in it) to a channel the Owner chose; and a game connection, where the community's Roblox game tells Klyro when a staff member of that community joins or leaves (to count their shift) or takes a moderation action. People are matched using the Roblox account they chose to link, and only that community's staff are affected.
• Support and reports: tickets you send us, and reports you file about an account or community. Staff who handle reports can see who you are, what you wrote and what happened; the account or community you reported can't. If you use live chat, the messages go through Psstly.
• Technical information: like most websites, our hosting providers process your IP address and basic request details in server logs, and we keep short-lived error records (what failed and where, never the content of what you wrote) for 30 days.
• Cookies and similar storage: see our Cookies page.

How we use it

To run the service and keep you signed in; to show communities their own records; to send the notifications you've asked for; to provide support; to keep Klyro safe (spotting abuse, enforcing the Terms, handling reports); to meet legal obligations; and to understand, in aggregate and from our own database, how many people sign in and which features communities use. We don't use your information for advertising and we don't build advertising profiles.

What Klyro staff can see

A very small team can open a community's records when needed for support, safety or legal reasons. Staff actions are recorded in an audit log. Staff can't see your password (we don't have it).

Communities and their Owners

When you join a community, its Owner and the staff they authorise can see the records that community keeps about you. The Owner decides what the community collects and is responsible for using it lawfully, for example by not collecting more about people (especially minors) than they need. Entries that others write about you in a community's logs (such as a moderation entry) belong to that community and may remain after you delete your account; ask the community's Owner, or us, if you want one reviewed.

Legal basis for processing

If the GDPR or UK GDPR applies to you, we process your information because it's necessary to provide the service you asked for (contract), for our legitimate interests in running and securing it, to meet legal obligations, and, for optional live chat and cookies that aren't strictly necessary, with your consent, which you can withdraw at any time from the “Cookie preferences” link in the footer.

Who we share it with

We don't sell your personal information and we don't share it for cross-context behavioural advertising. We use these service providers, who process information for us:

• Vercel hosts the website and its code.
• Google (Firebase / Firestore) stores our database.
• Clerk handles signing in. It loads only after you've made a choice on the privacy banner.
• Discord and Roblox, only when you connect an account. Your avatar images are loaded from their servers, which therefore see your IP address when a page is shown.
• Psstly provides live chat, only if you allow it.

We may also disclose information if the law requires it, to protect someone's safety or the service, or as part of a transfer of the project to someone else (we'd tell you).

Your rights and choices

• Download your data in Settings (“Export my data”).
• Delete your account in Settings → Danger zone. This removes your account, your place in communities, your support tickets and staff notes about you. A community you own must be handed over or deleted first.
• Correct or update your details in Settings, or ask us.
• Change your privacy choices at any time with “Cookie preferences” in the footer. We also honour the Global Privacy Control signal from your browser (and Do Not Track): optional features start switched off.
• Whatever the law where you live says, we offer these rights to everyone. If you're in the EU or UK you can also object to or ask us to restrict processing and complain to your data protection authority.

To use a right the tools don't cover, email privacy@klyro.team. We aim to reply within 30 days. If we can't do what you ask, we'll tell you why, and you can reply to ask us to reconsider.

How long we keep it

We keep account information while your account exists. A community's logs (shifts, moderation actions, applications) are kept by that community until its Owner removes them or the community is deleted. A deleted community is hidden at once and kept for 30 days in case it was a mistake, then permanently removed with everything in it. Support tickets are kept until you delete your account. Technical error records are kept for 30 days. The staff audit log is kept for security.

Children and teens

Klyro is not for children under 13. We ask everyone to confirm they're at least 13 before they use an account, and we don't knowingly collect personal information from anyone younger. If we learn we have, we'll delete it; a parent or guardian can email us to ask. If you're 13 to 17, you need a parent or guardian's permission to use Klyro. We don't use anyone's information, including teens', for advertising, we don't sell it, and we only ask for what the service needs. Community Owners must not ask members for more than they need.

Keeping it safe

Connections are encrypted (HTTPS), access is limited and logged, and we don't store passwords. No service is perfectly secure. If a breach affects your information, we'll tell you and the authorities as the law requires (for example under New York's SHIELD Act). See our Security page.

Where it's processed

Klyro is run from the United States and our providers (Vercel, Google, Clerk) process information in the US and other countries. Where the law requires safeguards for transfers from the EU or UK, we rely on the standard contractual clauses and similar protections our providers offer.

Changes to this policy

If we change this policy in a way that matters, we'll update the version and date above and ask you to agree again the next time you open Klyro.

Contact us

Klyro is run by an individual in New York, USA. Privacy questions and requests: privacy@klyro.team. Legal notices: legal@klyro.team.