Steam-linked access
Steam OpenID confirms your SteamID64 so the portal can connect you to your Northline RP citizen profile and permissions.
Privacy Policy
Plain, practical privacy for Northline RP.
This portal connects Steam, website features, and Northbound RP server data. This policy explains what information is collected or read, what may become public, what remains restricted, and how to contact the team.
Privacy by default
Profiles and public pages are intentionally limited, with sensitive gameplay, account, message, and staff data kept out of public view.
Safety and moderation
Staff may review logs, reports, posts, messages, bans, and audit records when needed to protect the server and community.
Your privacy tools
Open Data & PrivacyDownload your data or request deletion.
Signed-in players can use Profile Studio to export account-linked records or submit a deletion request. Deletion can reset in-game progress, so the request form explains the impact before it can be sent.
Who this policy covers
This Privacy Policy applies to the Northline RP community portal at northline.lol and related Northline RP web features for the Northbound RP / ApeTavern / aperp s&box server.
Northline RP is a community-run server. It is not affiliated with Valve, Steam, Facepunch, Garry's Mod, ApeTavern, or Northbound RP unless expressly stated.
Information we collect or read
The portal may read or store SteamID64 values, Steam display names, Steam avatars, citizen names, profile settings, public profile text, titles, roles, playtime summaries, job and character data, server connection history, public Tweeter/forum content, follows, likes, direct-message metadata/content where the messaging feature is used, Discord-link status, support/job applications, leaderboard values, ban records, moderation cases, audit logs, and server status information.
The site also uses website-owned records such as profile privacy choices, bios, visibility settings, moderation settings, staff access overrides, maintenance settings, status posts, and feature toggles. These records are stored separately from the live game save files.
Technical data, cookies, and sessions
When you sign in with Steam, the portal stores a session cookie so you can stay signed in and use account features such as dashboard settings, follows, likes, messages, applications, and staff tools where authorized.
The website is served through Cloudflare as the CDN, DNS, security, and reverse-proxy layer. Cloudflare and the origin host may process normal technical logs such as IP address, browser information, requested URLs, timestamps, errors, cache events, firewall/security events, and performance data. These logs are used for reliability, abuse prevention, troubleshooting, and security.
Steam, Discord, and third-party services
Steam handles login confirmation through Steam OpenID. Northline RP also uses server-side Steam Web API keys where configured to request public Steam profile information such as display name and avatar. Steam does not give Northline RP your Steam password through this process, and Steam API keys must remain server-side.
Northline RP integrates with Discord for community support, announcements, account linking, forum identity, staff notifications, admin audit webhooks, and bot/relay features. Discord bot tokens, webhook URLs, Steam API keys, and other credentials are operational secrets and should not be exposed publicly. Discord, Steam, s&box, Cloudflare, and the hosting provider operate under their own terms and privacy policies.
How we use information
We use portal and server information to provide login, player profiles, dashboards, server status, public activity, Tweeter/forum features, messages, leaderboards, applications, support workflows, bans/cases, staff tools, security checks, abuse prevention, and community moderation.
We may also use aggregate or operational data to understand uptime, population, feature usage, staff activity, server health, and whether a system is being abused or needs adjustment.
What may be public
Depending on feature settings and your profile choices, public pages may show Steam display name/avatar, citizen name, public bio, selected profile sections, public Tweeter posts, forum posts, follows/likes where visible, leaderboard entries, server activity summaries, and moderation records that are intentionally published for transparency.
Private profiles are hidden from the public player directory. Some server-published or moderation-related information may still appear where it is required for safety, transparency, or rule enforcement.
What is restricted from public view
The portal should not publicly expose private messages, exact private inventories, sensitive economy details, internal staff notes, moderation evidence, staff audit data, private Discord relay material, server secrets, webhook URLs, Steam API keys, or information that would make the server easier to exploit.
Staff-only pages may show more information than public pages. Staff access is permission-based and may be audited, restricted, or removed.
Moderation, staff review, and safety records
Staff may review user content, private reports, applications, messages, connection history, ban records, cases, server actions, and audit logs when needed to investigate abuse, enforce rules, protect players, secure the site, or comply with a legitimate request.
Administrative actions may be logged with the acting staff member, affected SteamID/account, action type, timestamp, and relevant notes so the team can detect misuse and maintain accountability.
Retention and deletion
You can update profile visibility and editable profile content from the dashboard where those controls are available. You can also contact the team for help with account/profile data that cannot be changed directly.
You can use Profile Studio > Data & Privacy to request a downloadable archive of your account-linked website data and available game/server data, or to submit a deletion request for staff review. The export is provided as a ZIP with plain README notes and structured JSON files where available.
Deletion requests can affect live game data. If processed, your character progress, money, inventory, rewards, and other in-game progress may be reset or removed with no recovery option. The deletion tool requires acknowledgement checkboxes and typed confirmation before the request is submitted. Some limited moderation, security, audit, or abuse-prevention records may be retained where operationally necessary.
Northline RP keeps limited server/provider backups for up to 14 days. Deleted live data may remain inside backup snapshots until those backups expire. If a backup must be restored, we will communicate it through Discord and the website status page, and will make a reasonable effort to re-apply completed deletion requests where technically possible.
Security
Northline RP uses server-side permission checks for staff and admin functionality, Cloudflare as a public-facing protection layer, and private server-side credentials for integrations. Secrets such as Steam Web API keys, Discord bot tokens, webhook URLs, bridge tokens, and command credentials should remain server-side and should not be committed to public code.
No community website can guarantee perfect security. Please report suspected data leaks, account issues, or unsafe pages through Discord support or the contact email below.
Access, questions, and changes
You may ask what account/profile information is associated with your SteamID64, request correction of inaccurate website-owned profile data, or ask for deletion where deletion is practical and not blocked by moderation, security, or operational needs.
We may update this policy as the portal adds or changes features. The Last updated date shows when this page was last materially revised.