This policy explains how Authorization uses information when you visit authorization.win, use panel.authorization.win, interact with its Discord app, or use its software licensing services. The app owner can be contacted on Discord as mercxy.
Information we use
- Discord sign-in and profile information, including your Discord account ID, display name, avatar, and server information needed to check management authority.
- Authentication and security information, including OAuth credentials, session records, bot-confirmation records, authenticator enrollment, recovery-code verifiers, and permission assignments.
- Information used for software licensing, including organization and application records, license records, software accounts, device bindings, and licensing sessions.
- Management actions, audit records, and operational information needed to run the service, investigate errors, and protect access.
We use this information to sign you in, confirm control of your Discord account, enforce organization permissions and license restrictions, perform requested management actions, maintain service records, and detect or investigate misuse.
Cookies and service providers
The management panel uses necessary authentication cookies to maintain your signed-in session. Discord provides sign-in and bot interactions. DigitalOcean hosts service infrastructure. Cloudflare provides website and network services and R2 recovery-backup storage. These providers process information needed for their respective functions under their own applicable terms and privacy policies.
Authorized staff can access information within their assigned organization permissions. Service operators can access information needed to administer, secure, and support the service. Information may also be disclosed when required by applicable law.
Optional public profiles
Your profile is unlisted by default. If you choose to appear publicly, your Discord display name and avatar may be shown to anyone visiting authorization.win, including visitors who are not signed in. The directory displays up to twelve opted-in profiles. Discord avatar URLs can identify the associated Discord profile. You can change your listing preference in the management panel.
The public website also displays aggregate platform statistics, including bot-verified member, application, and activated-license counts. Signing out does not remove historical verification records or automatically reduce these counts. Public profile sharing does not expose license keys, software-account details, or staff permissions.
Retention and security
We retain information as needed to operate and secure the service, administer licensing and permissions, investigate misuse, maintain required records, and process requests. There is no single retention period for every category. Temporary sessions and operation records have expiry and automated cleanup. Recovery backups rotate separately, so historical copies may remain until backup rotation removes them.
The service uses access controls and protections for sensitive authentication information. No service can guarantee absolute security.
Your choices and requests
To request deletion of your data, send a Discord direct message to mercxy or contact the app owner in the server where you use Authorization. Use the same contact for questions or, where applicable, requests to access, correct, or obtain a copy of your information. You may change optional public-profile sharing in the panel.
We may need to confirm your identity or authority over an organization before acting on a request. Deletion can affect account access, licensing, or management functions. Some records may need to remain for security, abuse investigation, applicable obligations, or requests involving other people's information. Backup copies are subject to the separate rotation described above.