Privacy Policy

Last updated October 8, 2026

1. What we collect

• From Roblox, when you sign in: your Roblox user ID, username, display name and avatar picture. Sign-in uses Roblox's official sign-in page.
• From your in-game profile: the roleplay first and last name you choose, your character's gender, and your birthday (month and day only, never the year).
• Roblox group: your rank in the Westbridge Roblox group, and group join requests, so the site can match your roles.
• Roleplay records: your roles, grade level, classes (including dropped ones), schedule, attendance, nurse visits and alerts, department membership, tasks and leave requests.
• Things you write: mail, Staff Hub posts, IT Support and Development tickets, and job applications with your answers.
• Activity: an audit log of actions on the site and in the game (for example "signed in", "changed someone's roles", "looked at a profile") with the time and who did it.

2. What we don't collect

• Your Roblox password, or any password at all.
• Your IP address. The audit log doesn't store IP addresses.
• Your real name, real address, phone number, real school, or payment details.
• Your birth year or exact age.
• Tracking or advertising cookies, or analytics that follow you to other sites.

Please don't type real personal or medical information into HorizonSIS. If someone does, an administrator will remove it.

3. How we use it

• To sign you in and show you the pages your roles allow.
• To run the roleplay: class lists, attendance, schedules, mail and the Staff Hub.
• To review staff applications from the Careers page.
• To keep the community safe: the audit log helps administrators see who changed what.
• To change your rank in the Westbridge Roblox group when staff give you an enrollment path or role.

4. Who can see it

• You can see your own dashboard, schedule and mail.
• Staff see only what their role needs. For example, teachers see their own class lists, and the office sees attendance.
• Health details (nurse visits and medical alert details) are only visible to the nurse and administrators, and are left out of the audit log.
• Job applications are only visible to Human Resources members with the Job Postings permission.
• Administrators can see everything to run and moderate the community.

5. Sharing

We don't sell, rent or trade your information, and we don't share it with advertisers. The only outside services involved are the ones that run the site:

• Roblox, for signing in, looking up usernames and changing group ranks.
• Vercel, which hosts the website.
• Supabase, which hosts the database.

We may share information if Roblox or the law requires it, or to protect someone's safety.

6. Cookies

We use one cookie to keep you signed in (it expires after 12 hours) and a short-lived one during sign-in to protect it. Both are required for the site to work. There are no advertising or tracking cookies.

7. Where it's stored and how it's protected

Information is stored in a Supabase database that only the site's server can reach. Pages only get the information the signed-in person is allowed to see. Connections to the site are encrypted (HTTPS). No system is perfectly secure, but we try hard to keep yours safe.

8. How long we keep it

We keep your profile while you're part of the community. Deleted mail and records are removed from the site. Audit log entries are kept so administrators can look back at what happened. Job applications are kept until Human Resources deletes them or the job posting is deleted.

9. Your choices

• You can ask to see what we have about you, to fix it, or to delete your profile. Open an IT Support ticket or message an administrator.
• You can disconnect HorizonSIS from your Roblox account at any time in your Roblox settings, under the apps you've authorized.
• If your profile is deleted, the audit log may still show that an action happened, without your profile attached.

10. Younger players

Many Roblox players are young. That's why we ask for roleplay names instead of real ones, only ask for a birthday's month and day, and never ask for contact details beyond a Discord username on some job applications. If you're a parent or guardian and want your child's information removed, contact an administrator and we'll delete it.

11. Changes

If we change this policy, we'll update the date at the top. For bigger changes we'll post a notice in the game or the Staff Hub.

12. Contact

Questions about your information? Sign in and open an IT Support ticket, or message an administrator through the Westbridge Roblox group. Also see our Terms and Conditions.