Privacy policy

Last updated 23 September 2026

This policy covers two things run by the developers of Thief Game, a game on Roblox:

• The account link: the Thief Game Discord bot's /link command, which connects your Discord account to your Roblox account with Sign in with Roblox.
• This website, thief.world.

What the account link gets from Roblox

When you press Sign in with Roblox and approve it, Roblox tells the bot your Roblox user ID and your public profile: your username, display name, the date you made your account, your profile link and your avatar picture.

The bot keeps your user ID, username and display name, and ignores the rest.

Roblox never gives the bot your password, email address, phone number, Robux, inventory or messages, and the bot cannot post anything or change anything on your Roblox account. Roblox gives the bot a short-lived sign-in token. The bot uses it once to read your user ID and then cancels it, so it never stays signed in as you.

What the bot keeps

While you are linked, the bot's database holds:

• your Discord user ID
• your Roblox user ID, username and display name
• when you linked
• whether your game save is on the live game or the test version
• whether you chose to show your name in the heist feed
• which game roles the bot gave you, and when it last checked them

What the bot reads from the game

Using your Roblox user ID, the bot reads your Thief Game save. It never changes it. From the save it uses your level, XP, rank, Coins, Run progress, contracts, items found and friends invited. It reads the save when you link, when you use /stats, and every few hours to keep your game roles up to date. It keeps the numbers for about a minute and does not store them. Your /stats card also shows your Roblox avatar picture, which the bot fetches from Roblox each time.

Who sees it

• /stats is shown only to you, unless you choose to share it in the channel.
• Game roles are Discord roles, so everyone in the server can see them.
• The heist feed posts big moments from the game in the Discord server. It shows your Roblox display name only if you linked and turned on /heistfeed show-my-name. Otherwise it calls you "A thief".
• Testers: if you file a bug report from inside the game, your linked Discord account is mentioned on the report's Discord post so you see replies.
• The game's developers can look up links for support and moderation.

Nobody else sees it. We do not sell or share it, and there are no ads or tracking.

Where it is kept

The bot's database and its log are on a private server the developers rent. The log records each link and unlink (Discord ID, Roblox ID and username) so problems can be fixed. Old log entries are removed as the log fills up.

Discord carries your messages to the bot, and Roblox runs the sign-in. Their own privacy policies cover what they do. So that the link page can show which Discord account a sign-in is for, the sign-in carries your Discord display name through Roblox to that page.

How long, and how to delete it

• Type /unlink in the Discord server at any time. The bot deletes your link straight away and removes the game roles it gave you. Your game progress is not touched.
• Leaving the Discord server does not unlink you. Use /unlink first, or ask a developer.
• If you ask a developer, or Roblox sends the game an erasure request for your account, the developers delete your link and any bug reports tied to your Roblox account.

Age

Roblox only lets accounts for people aged 13 or older approve apps like this one, and Discord's users must be at least 13 (older in some countries). The heist feed never names anyone who has not turned it on.

This website

thief.world sets no cookies and has no ads, analytics or tracking. GitHub hosts the site and logs visitors' IP addresses for security, as its own privacy statement describes. When Roblox sends you back to the link page, the page's address carries your one-time code and Discord display name, so GitHub's servers see them with the page request. The page loads nothing from anywhere else and removes the code from the address bar once it has shown it. The code works only once, only for the bot, and only for one minute.

Contact

Ask a developer in the Thief Game Discord server, or open an issue at github.com/RealScripty/thief.world. Issues are public, so do not post personal details there.

Changes

If this policy changes, the date at the top changes too.