Server-Keys are stored encrypted. The website can store a key but never read it back, and keys are never logged or shown again.
Metro reads only what the ER:LC API reports: usernames, ids, teams, staff permission levels, callsigns, wanted stars, vehicles, positions, kills, staff commands, mod calls and 911 calls.
Live positions are kept 15 minutes. Camera sightings are kept 24 hours by default, up to 7 days on Plus. The camera search log is kept 90 days. Election ballots are kept 30 days, then only totals. Plus purchase records are kept 5 years for bookkeeping law. Help tickets and suggestions are kept until deleted on request.
You must be 13 or older to use Metro. A parent or guardian can ask for a child's data to be deleted by email to legal@metrobot.app with the child's Roblox username and the server.
Your data:https://metrobot.app/me/data. Download my data gives a file of what Metro stores about you. Delete my data removes your name from the records, deletes your camera sightings and, for "everywhere", every Roblox link you have had. Balances and fines stay without your name. Help tickets and suggestions are not included; email legal@metrobot.app for those.
Players can delete their own camera observations on a server from Me > Camera sightings, and hide themselves from every public server page on Me > Profile.
Public pages show Roblox usernames only.
Owners can see who searched the cameras or looked up a person or plate, and when.