Role Gate Privacy Policy

Last updated: October 7, 2026

This policy explains what Role Gate, a Discord role-verification bot operated by The Misfits Order, a Solana NFT community project ("we", "us"), collects and how we use it. Role Gate collects only what it needs to assign Discord roles based on NFT holdings and to run holder polls.

Information we collect

• Discord account information. When you connect Discord, we use the identify and guilds scopes to read your Discord user ID and username, and the list of servers you belong to. We use the server list only to know which Role Gate servers to assign your roles in.
• What the bot sees in a server. When you use the /verify command or a Role Gate button, Discord sends us your user ID, username, and the server you used it in. In servers that use Role Gate, the bot reads your current roles there (to grant or remove the right ones and to weight role-based votes), and reads the server's list of roles and channels. The bot does not read your messages.
• Linked wallet addresses. The public Solana wallet addresses you choose to link, each proven by a signature. You can link up to 10.
• On-chain NFT holdings. We read the NFTs held by your linked wallets from the public Solana blockchain (through a blockchain data provider) to evaluate role rules and poll eligibility. We do not keep a copy of your holdings. We store the roles you have been granted, and, for poll votes, the IDs of the NFTs counted toward your vote (so the same NFT can't vote twice in one poll). Holdings may be cached for up to 10 minutes to avoid repeated lookups.
• Poll votes. When you vote in a holder poll, we store your Discord user ID, username, the options you chose, your vote weight, and the NFTs counted toward it.
• Server configuration. For servers that use Role Gate: the role rules, polls, verification post and channel, and the Discord ID of the administrator who set the server up.
• Server owners. Setting up a server requires holding Misfits. Owners sign in to the setup page with Discord through The Misfits Order Tools. We store one of the owner's linked wallet addresses with the server and check the Misfits held across all their linked wallets daily. The Tools record usage against the owner's Discord account for our own analytics. This record is kept indefinitely.
• Security and operational data. Your IP address is used briefly to rate-limit requests and protect the service. The counter expires within a minute. Our hosting provider keeps standard request logs.

What we do not collect

We never request, receive, or store your private keys or seed phrase, and we cannot move your assets. Wallet verification uses a signed message (or, if you choose the hardware-wallet option, a memo transaction that is never broadcast) that proves ownership only: it transfers nothing and creates no on-chain transaction. We do not collect your email, payment details, or off-chain personal information.

How we use your information

• To determine which roles your linked wallets qualify for and to grant or remove those roles in Discord.
• To keep your roles in sync as your holdings change or as you join servers that use Role Gate.
• To check poll eligibility, weight votes, and show poll results.
• To check that server owners still meet the holding requirement, and to message them by Discord DM if they don't.
• To operate, secure, and troubleshoot the service.

Who can see your information

• Poll results are visible to voters. Members eligible to vote in a poll, and that server's administrators, can see each voter's username, chosen options, and vote weight.
• Server administrators can see how many members Role Gate has granted each role. They can also download a snapshot of the members Role Gate has granted a role in their server. It lists each member's Discord ID and username, how many NFTs from that role's collection they hold, and the linked wallets that hold them. Once downloaded, that file is in the administrator's hands.
• Your linked wallet addresses are visible to you and to us as operators of the service. When Role Gate grants you a role in a server, that server's administrators can see the linked wallets that hold NFTs from that role's collection, through the snapshot described above. Your other linked wallets are not shown to them, and your wallets are never shown to other members.

Storage and security

Data is stored in our database, run by a cloud database provider. Your Discord OAuth refresh token, which lets us keep your roles in sync without asking you to reconnect, is encrypted at rest (AES-256-GCM), so a leaked database record is useless without our server key. Access is limited to operating the service.

Third parties

We share information only with the services needed to run Role Gate: Discord (to read your identity and servers and to manage roles), and the providers we use for blockchain data, database storage, hosting, and rate limiting and short-lived caching. Each receives only what it needs to provide its service to us. We do not sell your information or use it for advertising.

Retention

• Your account, linked wallets, and role records are kept while you use Role Gate, and erased when you delete your account.
• Your stored Discord token is dropped if you revoke Role Gate's access in Discord, or when you delete your account.
• Poll votes are kept with the poll, including after you delete your account. Each vote was cast while you were a verified holder, so it stays part of that poll's record and results, with your username. A vote is removed when the server deletes the poll.
• Server configuration is kept until the server's administrator removes it.

Your choices and data deletion

• Unlink a wallet at any time from Manage Membership or the verification page, and your roles update straight away.
• Delete your account from Manage Membership. This removes the roles Role Gate granted you (except roles a server has marked additive, which another bot also manages), and erases your linked wallets, role records, account, and stored Discord token. Poll votes remain as described above.
• Revoke Discord access from Discord's User Settings, Authorized Apps. We drop your stored token and stop finding new servers you join. In servers where you already hold Role Gate roles, the bot keeps them in sync with your linked wallets until you unlink them or delete your account.
• Other requests, such as a copy of your data, can be made by contacting us.

Eligibility

Role Gate is not directed to anyone below Discord's minimum age. By using it you confirm you meet Discord's age and Terms of Service requirements.

Changes

We may update this policy. Material changes take effect when posted here, with the date above updated.

Contact

Questions or data requests? Reach us in our Discord. See also our Terms of Service.