Privacy Policy
Last updated:
This Privacy Policy explains how the developers of RbxYz collect, use, and handle information. We process personal data in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Acts 1988–2018 (Ireland).
1. What Data We Collect
We collect only the minimum data necessary for the Bot to function:
- Discord User IDs: Collected to manage per-user cooldowns, prevent abuse, and track progression in server-specific features.
- Discord Server (Guild) IDs: Collected to store server-specific configuration settings.
- Roblox IDs & Usernames: Provided voluntarily by you when issuing commands; used strictly to fulfil your request in real-time.
- Command Usage Data: Basic, non-identifying logs. If a command results in an error, your Discord username may be logged to a secure, access-controlled developer channel solely for debugging purposes.
We do not collect real names, emails, payment info, or special category data.
2. Legal Basis for Processing
- Performance of a Contract (Article 6(1)(b)): To provide the service you requested.
- Legitimate Interests (Article 6(1)(f)): To provide a functional, persistent Bot experience (e.g., storing server settings).
- Legal Obligation (Article 6(1)(c)): To comply with applicable laws.
3. Data Sharing & Third Parties
We do not sell, rent, or trade your personal data. To fulfil your requests, the Bot securely communicates with external APIs (Roblox, Rolimons, Rotector). For example, Discord User IDs and Roblox User IDs are transmitted to the Rotector API when processing security verification requests. These services operate under their own privacy policies.
4. Real-Time Processing & Retention
- Third-Party Data: Processed in real time and discarded from memory. We do not archive player profiles or trade data.
- Server Configurations: Retained indefinitely to preserve settings. Server owners must manually request deletion to wipe their server data.
- Discord User IDs (Blacklist): IDs placed on our abuse blacklist contain no personal information beyond the ID itself and are retained indefinitely solely to protect the integrity of the service and the safety of other users. This retention is based on our legitimate interest in preventing abuse under Article 6(1)(f) GDPR. All other User IDs used for cooldown management are purged after the active cooldown expires.
- Analytics Logs: Anonymised usage logs are retained for up to 90 days.
5. Your Rights Under GDPR
If you reside in the EU/EEA, you have the right to access, rectify, erase, restrict, object to, or port your personal data. You may exercise these rights by contacting us via our Support Server or at support@rbxyz.dev. We will respond within one calendar month in accordance with our GDPR obligations.
You also have the right to lodge a complaint with the Irish Data Protection Commission (DPC) at dataprotection.ie.
6. Data Security
We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or alteration. However, no transmission over the internet is 100% secure. We strictly restrict access to personal data, such as debugging error logs, to authorised developers only.
7. Children's Privacy
The Bot is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. Users aged 13–17 must have parental or guardian consent before using the Bot.
8. Contact
For data subject requests or concerns, contact us via our Support Server or email us at support@rbxyz.dev.