Privacy Policy

In effect from September 25, 2026

This policy explains what Civitas (Civitas Technology, "we" or "us") collects when you use cmty.app, the Civitas bots, the Civitas Relay and the Civitas objects in Second Life, and what you can do about it. It also covers Second Life residents who never signed up but belong to a group or community that uses Civitas.

Who's responsible

For your Civitas account and how the service runs, we are: Civitas Technology, 251 Little Falls Dr, Wilmington, DE 19808, United States, civitas@cmty.app.

For what a community records about its members, such as its member list, roles, moderation cases and roleplay records, the community's owner decides what's kept and why, and we look after it on their behalf. Questions about a community's decisions are best asked of its owner; we'll help if you can't reach them.

What we collect

Your Second Life identity

Your avatar's UUID (the ID Second Life gives every avatar), its username and display name, and which picture is on its Second Life profile. Names can change in Second Life, so we refresh them from time to time. If you link several avatars to one account, we record which one is your main.

Your Civitas account

• When you created it and when you last used Civitas.
• Your password, only as a salted, slow hash that can't be turned back into the password.
• Your passkeys: only their public keys, the names you give them and what kind of device or password manager holds them.
• Your sessions: when and how you signed in, and a hash of the session token.
• A picture, if you upload one. We re-encode it so nothing of the original file, such as where it was taken, is kept.

Discord

If you link your Discord account, we keep its Discord ID, username, display name and picture, and nothing else from Discord. If a community adds Civitas to a Discord server, we keep the server's ID, name and icon, who added it, and the channels Civitas posts to.

Community information

• Who belongs to each community, their roles, and when they joined or left.
• The audit log: a record of every change made through Civitas, with who made it, who asked for it and what changed. It's how communities see who did what, so it names the people involved.
• What Civitas bots read from the Second Life groups a community connects: the group's members (avatar UUID, names, titles, roles and when they were last online, as Second Life shows them to the group's officers), its roles and its ban list. This includes residents who have never used Civitas.
• Whatever a community's managers write down, such as moderation cases and their evidence, notes and roleplay records.
• Messages in a synced chat, when a community links its group chat with Discord or the website. They pass through Civitas to be copied to the other side.
• The Civitas objects paired with a community in Second Life, and what they report.

Bots

How many messages each bot sends each day, which we must count under Linden Lab's rules. If you ask us to host your own bot, we keep its password encrypted with a key that never leaves our key vault; only the bot host can decrypt it and nobody, our staff included, can view it. Civitas Relay bots' passwords stay on your own computer and never reach us.

Technical information

Your IP address and browser details reach our servers with every request. We use your IP address to slow down repeated attempts to guess passwords or codes, and it appears in our server logs.

What we don't collect

Your email address, real name, payment card details (payments are made in L$ in Second Life) or your Second Life password, unless you ask us to host that avatar as a bot.

How we use it, and why we're allowed to

We don't use your information for advertising, and we don't make automated decisions about you that have legal or similar effects.

Who sees it

• Your communities. Their managers see what their pages show them, depending on the permissions their owner gives them. Other communities don't see it.
• Linden Lab. Bots act in Second Life, so what they send (invites, messages, notices) goes through Linden Lab's systems.
• Discord. When you or your community use Discord with Civitas, what's posted there goes through Discord.
• Our service providers, who run things for us and may only use your information to do so: our hosting provider, Hetzner Online (servers in Hillsboro, Oregon, USA), and Google Fonts, from which our pages load their typefaces, so Google sees your IP address.
• Have I Been Pwned, when you choose a password: only the first 5 characters of its SHA-1 hash are sent, which can't reveal the password.
• The authorities, only when the law requires it or to protect someone from serious harm.
• A new owner, if Civitas is sold or merged. This policy would still apply to your information, and we'd tell you first.

We never sell your information or share it for targeted advertising.

Where it's kept

Our servers are in the United States. If you're elsewhere, your information is transferred there, with the safeguards the law requires.

How long we keep it

• Your account, until you delete it or ask us to.
• Sessions, until they end: at most 30 days after you sign in.
• Community information, until the community deletes it or deletes the community. A group's roster is kept while the group is connected to Civitas.
• Audit logs, as long as the community exists on Civitas.
• Server logs, including IP addresses, for a short while, after which they're overwritten.
• Deleted information can stay in backups until they're replaced.

Your rights

Wherever you live, you can ask us to:

• give you a copy of your information, in a format you can take elsewhere;
• correct information that's wrong;
• delete your information;
• stop or limit using it, or object to how we use it.

Under the GDPR and UK GDPR, and under the CCPA and other US state laws, these are your legal rights. You also have the right not to be treated differently for using them. We don't sell or share personal information for targeted advertising, so there's nothing to opt out of.

Much of your account you can see and change yourself in Account settings: your picture, linked avatars, passkeys, password and Discord link.

Asking for a copy or for deletion

Write to civitas@cmty.app with your avatar's username and what you'd like. As we don't keep email addresses, we'll confirm it's you by sending a code to your avatar in Second Life. We'll answer within 30 days, and tell you if we need longer. Someone you authorize can ask for you.

When you ask for deletion, we delete your account and remove your name from what communities hold where we can. Some records may stay, with the reason, such as a community's record that you were banned or an audit log entry about a change you made, where they're needed to keep a community safe or the law requires them. For information a community recorded about you, we'll pass your request to its owner and make sure it's answered.

If you're not happy with our answer, you can complain to your local data protection authority.

Cookies and browser storage

Civitas uses only the cookies it needs to work, so there's no cookie banner. There are no analytics or advertising cookies.

Your browser also remembers, on your device only, whether you chose light or dark mode and which parts of the navigation you folded away. Clearing your browser's site data resets them.

Children

Civitas isn't for anyone under 18. If you believe a child has given us their information, tell us and we'll delete it.

Changes to this policy

If we change this policy in a way that matters, we'll say so on Civitas before the change takes effect. The date at the top shows when it last changed.

Contact

Questions about your privacy go to civitas@cmty.app, or by mail to Civitas Technology, 251 Little Falls Dr, Wilmington, DE 19808, United States.