Privacy Policy
1. About this policy
This page explains what RbxArmy collects when you use our site, what we do with it, and the choices you have. "We" and "us" mean RbxArmy and the team operating it. Using the site means you accept the practices described here. If anything is unclear, the contact section at the bottom is the fastest way to reach us.
2. What we collect
When you sign in we record your Roblox username, your Roblox user ID, and your public avatar URL. These are pulled from Roblox's public APIs, never from any private account data. While you use the site we automatically log technical details like your IP address, browser, device type, language, and pages visited. When you submit proof for a task, we store the proof artifacts (screenshots, text fields, optional notes) along with the submission's review state.
3. Cookies and local storage
We use cookies and browser local storage for the basics: keeping you signed in, remembering your language preference, and powering session security. You can clear cookies or block them in your browser, but the site won't work properly without the session cookie.
4. How we use your data
We use what we collect to authenticate you, credit your earnings, prevent fraud and multi-accounting, review task submissions, respond to support requests, send Web Push notifications if you opted in, and improve the site through aggregated analytics. We don't sell personal data, full stop. We share what's strictly required with payment processors when you withdraw, and the cloud services that host our infrastructure.
5. Security
User passwords are never stored. We don't ask for them. Sessions are signed with rotating server-side tokens, secrets like API keys and database credentials are kept in encrypted environment storage, and database access is locked down with row-level security. No internet service is unbreakable, but we follow the standard playbook (HTTPS everywhere, least-privilege access, regular dependency updates) to keep risk low.
6. Your rights in the EU and UK (GDPR)
If you're in the EU, EEA, or UK, you can request access to the data tied to your account, correction of anything inaccurate, deletion of your account and associated data, a portable export of your data, or restriction of how we process it. Email privacy@rbxarmy.com from the email tied to your account (or open a support ticket while signed in) and we'll respond within 30 days as required by law.
7. Your rights in California (CCPA / CPRA)
California residents have the same access, deletion, and portability rights described above, plus the right to opt out of any "sale" or "sharing" of personal information for cross-context behavioral advertising. We don't sell personal information. You can exercise any of these rights through the same support channels.
8. Children's privacy
RbxArmy is not directed at children under 13 and we don't knowingly collect data from anyone in that age range. If we learn we've stored data from a user under 13 we'll delete it. Parents or guardians who suspect a younger child has signed up should contact us at privacy@rbxarmy.com so we can remove the account.
9. Updates and contact
If we change this policy in a meaningful way we'll post the updated version at this URL with a fresh date. For any privacy-related question, request, or complaint, write to privacy@rbxarmy.com.
Last updated: April 26, 2026.