Bloxello Privacy Policy

This Privacy Policy explains how Meta Games LLC, an Oregon limited liability company operating Bloxello ("Bloxello," "Meta Games," "we," "us," or "our"), collects, uses, stores, shares, and protects personal information.

This Policy applies to bloxello.com, bloxello.store, associated storefronts, APIs, applications, and related services (collectively, the "Service").

By using Bloxello, you acknowledge the data practices described in this Policy.

1. Who We Are

Bloxello is a digital marketplace and storefront platform for Roblox creators, developers, and communities.

The Service is operated by Meta Games LLC, a company organized in Oregon, United States.

Bloxello operates independently of Roblox Corporation and Discord Inc. and is not affiliated with, endorsed by, sponsored by, or authorized by either company.

For privacy inquiries, contact:

Email: support@meta-games.org
Subject: Privacy Request
Websites: https://bloxello.com and https://bloxello.store

2. Information We Collect

We collect information necessary to provide marketplace functionality, authenticate users, process transactions, protect accounts, and maintain the Service.

2.1 Account Information

When you register or use an account, we may collect:

• Email address.
• Username and display name.
• Account identifiers.
• Profile information and preferences.
• Authentication and login records.
• Account creation and modification timestamps.
• Security settings and verification status.

If password-based authentication is available, passwords are stored using appropriate cryptographic hashing rather than plaintext storage.

2.2 Connected Roblox and Discord Accounts

When you voluntarily connect a Roblox or Discord account, we may receive information authorized through the applicable authentication or integration process.

This may include:

• Platform-specific user identifiers.
• Usernames and display names.
• Profile images or avatar information.
• Account connection status.
• Relevant server, group, community, or experience identifiers.
• Other information required for features you explicitly authorize.

We do not require your Roblox or Discord account password to establish standard OAuth-based account connections.

You may disconnect optional integrations through supported account settings.

Disconnecting an integration does not necessarily delete records required for completed transactions, fraud prevention, or legal compliance.

2.3 Storefront and Product Information

When operating a storefront, we may process:

• Store names, descriptions, and branding.
• Product titles, descriptions, pricing, and categories.
• Uploaded files, thumbnails, and previews.
• Product licenses and distribution settings.
• Connected Roblox experiences and product identifiers.
• Custom-domain configurations.
• Webhook endpoints and integration settings.
• Sales statistics and product performance information.

Information intentionally published in public storefronts may be visible to visitors, buyers, and search engines.

2.4 Purchases and Transactions

When you purchase or sell products, we may collect:

• Order and transaction identifiers.
• Purchased product information.
• Purchase timestamps and amounts.
• Payment status and currency.
• Product entitlement and delivery records.
• Refund, chargeback, and dispute information.
• Payment-provider references.
• Relevant billing or tax information provided through supported payment integrations.

USD transactions are processed through Stripe or other designated payment providers.

Bloxello does not ordinarily store complete payment card numbers or card security codes.

Robux purchases are processed through Roblox's payment systems. Bloxello may receive or process transaction confirmations and entitlement information required to deliver products.

2.5 Technical and Usage Information

When you access Bloxello, we may automatically collect:

• IP addresses.
• Browser and device information.
• Operating system and user-agent details.
• Requested pages and API endpoints.
• Request timestamps and response status codes.
• Authentication events.
• Session identifiers.
• Error and diagnostic information.
• Security and rate-limiting records.
• General usage and performance metrics.

This information helps us maintain reliability, troubleshoot errors, identify abuse, and protect the Service.

2.6 Support and Communications

When you contact support or submit a report, we may retain your messages, attachments, related account details, and correspondence necessary to resolve the request.

We may also retain records of moderation actions, intellectual property complaints, and marketplace disputes.

3. How We Use Information

We use collected information for legitimate operational purposes, including:

Account management: Creating accounts, authenticating users, managing sessions, and maintaining account preferences.

Marketplace operations: Publishing storefronts, processing purchases, delivering digital products, and maintaining entitlements.

Payments and billing: Recording transactions, supporting payment providers, handling subscriptions, and resolving payment disputes.

Integrations: Connecting authorized Roblox, Discord, and third-party services.

Security: Detecting fraud, investigating abuse, enforcing policies, and protecting users and infrastructure.

Communications: Sending purchase receipts, account notifications, security alerts, service announcements, and support responses.

Platform improvement: Diagnosing errors, measuring performance, and improving functionality.

Legal compliance: Maintaining records and responding to valid legal obligations.

We do not sell personal information to data brokers or advertisers.

We do not use private marketplace files or private account information for unrelated advertising purposes.

4. Legal Bases for Processing

Where the European Union's General Data Protection Regulation (GDPR), the United Kingdom's GDPR, or similar laws apply, we process personal information under an appropriate legal basis.

Depending on the activity, this may include:

• Contractual necessity: Providing accounts, purchases, product delivery, and requested services.
• Legitimate interests: Maintaining platform security, preventing fraud, resolving disputes, and improving reliability, subject to applicable balancing requirements.
• Legal obligations: Complying with tax, financial, consumer protection, and other legal requirements.
• Consent: Processing information for optional activities where consent is required.

Where processing relies on consent, you may withdraw it through available settings or by contacting support.

Withdrawal does not affect processing lawfully performed before withdrawal.

5. Infrastructure and Data Hosting

Bloxello uses third-party infrastructure providers to host and operate its services.

5.1 Application and Database Hosting

Our API servers, database systems, and in-memory application operations are hosted on infrastructure provided by Contabo GmbH, a Germany-based hosting provider.

These systems are hosted in the European Union.

They may process account information, authentication records, marketplace data, transaction records, and operational logs.

5.2 File Storage

Bloxello uses Backblaze B2 Cloud Storage, accessed through its Amazon S3-compatible API, for storing digital marketplace assets and associated files.

This may include product downloads, images, previews, and other uploaded content.

Use of an S3-compatible API does not necessarily mean that the files are hosted by Amazon Web Services.

Storage locations and data-handling practices may depend on the configured Backblaze storage region and applicable service arrangements.

5.3 Third-Party Processing

Additional providers may process limited information necessary to operate features such as payments, email delivery, authentication, analytics, security, or connected integrations.

We seek to limit information shared with providers to what is reasonably necessary for the relevant service.

6. How We Share Information

We may share personal information in the following circumstances.

6.1 Service Providers

We may share relevant information with providers supporting hosting, storage, payment processing, communications, authentication, fraud prevention, and other operational functions.

These providers process information according to their applicable agreements, policies, and legal obligations.

6.2 Sellers and Buyers

Certain transaction information may be shared between buyers and sellers when necessary to fulfill orders, provide support, enforce licenses, or resolve disputes.

This may include relevant order identifiers, product information, entitlement status, and limited account identifiers.

Sellers are responsible for handling any personal information they independently receive in compliance with applicable privacy laws.

6.3 Webhooks and Integrations

Sellers may configure webhooks that transmit selected storefront events to endpoints they control.

Depending on the event, webhook payloads may include product identifiers, transaction details, entitlement information, or limited customer identifiers.

Sellers are responsible for securing their endpoints and processing received information lawfully.

6.4 Legal and Safety Requirements

We may disclose information when reasonably necessary to comply with valid legal process, respond to lawful requests, protect users, investigate fraud, or defend legal rights.

6.5 Business Transfers

If Meta Games LLC undergoes a merger, acquisition, restructuring, or transfer of relevant business assets, information may be transferred as part of that transaction, subject to applicable law and appropriate protections.

We do not disclose private customer information to unrelated third parties for their independent marketing purposes without an appropriate legal basis.

7. Cookies and Local Storage

Bloxello may use cookies, browser storage, and similar technologies to maintain essential functionality.

These technologies may support:

• Authentication and session management.
• Security and fraud prevention.
• User preferences and interface settings.
• Storefront functionality.
• Service diagnostics and performance measurement.

Essential cookies and storage mechanisms may be required for the Service to function correctly.

Where non-essential analytics or similar technologies require consent, we will seek that consent as applicable.

You may manage cookies through your browser settings, although disabling certain technologies may affect account access or other features.

8. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, subject to applicable legal obligations.

Retention periods vary according to the type of information and its purpose.

For example:

• Account records may be retained while an account remains active.
• Storefront and product information may remain available while published or necessary to fulfill existing obligations.
• Purchase and payment records may be retained to satisfy financial, tax, accounting, and dispute-resolution requirements.
• Security records may be retained for reasonable fraud-prevention and investigation purposes.
• Support correspondence may be retained as necessary to resolve requests and maintain appropriate records.
• Backup copies may remain temporarily after deletion until normal backup expiration.

We may retain limited information after account closure where necessary to comply with law, prevent fraud, resolve disputes, or protect legitimate legal interests.

When information is no longer required, we take reasonable steps to delete, anonymize, or otherwise securely dispose of it.

9. Data Security

We implement reasonable technical and organizational safeguards intended to protect information against unauthorized access, alteration, disclosure, and loss.

Depending on the system, safeguards may include:

• Access controls and authentication requirements.
• Cryptographic hashing of stored passwords.
• Encrypted network communications.
• Restricted administrative access.
• Security monitoring and audit logging.
• Signed or authenticated webhook communications.
• Infrastructure-level protections and access restrictions.
• Backup and recovery measures.

No online platform, storage provider, or transmission method can guarantee absolute security.

Users are responsible for maintaining secure authentication credentials and protecting their connected accounts.

If you suspect unauthorized access, contact support promptly.

10. International Data Transfers

Meta Games LLC is established in the United States, while certain Bloxello infrastructure is hosted in the European Union.

Personal information may be accessed, transferred, or processed in other jurisdictions where we or our service providers operate.

Such jurisdictions may have privacy laws different from those in your country.

Where applicable law requires specific safeguards for international transfers, we will use appropriate legal mechanisms, such as recognized contractual protections or other lawful transfer arrangements.

Hosting information in the European Union does not necessarily mean that all processing occurs exclusively within the European Union.

11. Your Privacy Rights

Depending on your location and applicable law, you may have the right to:

• Request access to personal information we maintain about you.
• Request correction of inaccurate information.
• Request deletion of eligible personal information.
• Request a portable copy of certain information.
• Object to or restrict certain processing.
• Withdraw consent where processing relies on consent.
• Appeal certain privacy-request decisions where applicable.
• Submit a complaint to an appropriate data protection authority.

We will review and respond to requests in accordance with applicable law.

We may need to verify your identity before fulfilling a request.

Certain information may be excluded from deletion where retention is legally required or otherwise permitted, including financial, fraud-prevention, and dispute-related records.

To submit a request, email support@bloxello.com with the subject "Privacy Request."

We will not discriminate against users for exercising privacy rights protected by applicable law.

12. Account Deletion

You may request account deletion through supported account controls or by contacting Bloxello support.

Deletion may result in loss of access to purchased products, storefront management features, subscription benefits, and other account-associated services.

Before processing deletion, we may require resolution of outstanding disputes, verification of account ownership, or completion of legally required retention procedures.

Public storefront content may be removed or deactivated, while certain transaction and entitlement records may remain where legally justified.

Deletion requests do not automatically remove information independently retained by Roblox, Discord, Stripe, sellers, or other third parties.

13. Children's Privacy

Bloxello is not intended for children under 13.

We do not knowingly collect personal information directly from children under 13 without any consent or authorization required by applicable law.

Users under the age of majority must obtain parental or guardian permission where required.

Certain marketplace, selling, or payment features may be restricted based on age or payment-provider eligibility requirements.

If we learn that personal information has been collected from a child in violation of applicable law, we will take appropriate steps to delete or otherwise lawfully address that information.

Parents or guardians may contact support@bloxello.com regarding potential children's privacy concerns.

14. Third-Party Websites and Services

Bloxello may contain links to external websites, Roblox experiences, Discord communities, seller-operated services, and other third-party resources.

These services may collect and process information under their own privacy policies.

We are not responsible for the independent privacy practices of third-party services.

We encourage users to review the applicable policies before sharing information or completing transactions outside Bloxello.

15. Public Content

Certain information you choose to publish may be publicly accessible.

Examples include:

• Public storefront names and descriptions.
• Seller usernames and profile information.
• Product listings and previews.
• Publicly displayed reviews or other user-generated content.
• Storefront branding and linked public accounts.

Public information may be indexed, cached, or copied by third-party services.

Removing content from Bloxello may not immediately remove copies maintained by search engines or unrelated third parties.

Do not publish sensitive personal information in public storefront content.

16. Automated Security Processing

We may use automated technical systems to identify suspicious activity, detect spam, enforce rate limits, validate transactions, and protect marketplace infrastructure.

These systems may evaluate technical signals such as request patterns, authentication events, transaction activity, and account behavior.

Where applicable law provides rights concerning decisions based solely on automated processing that produce legal or similarly significant effects, users may exercise those rights through our privacy contact.

17. Changes to This Policy

We may revise this Privacy Policy to reflect changes in our services, infrastructure, processing practices, or legal obligations.

The latest version will be published on our website with an updated revision date.

Where required by law, we will provide additional notice or request consent before material changes take effect.

We encourage users to review this Policy periodically.

18. Contact Us

For questions, privacy requests, or concerns regarding personal information, contact:

Meta Games LLC
Oregon, United States

Service: Bloxello
Websites: https://bloxello.com and https://bloxello.store
Email: support@meta-games.org
Privacy Request Subject: Privacy Request

We will review inquiries and respond in accordance with applicable legal requirements.