Privacy Policy

Effective 29 September 2026

This policy explains what Roblox Alt Checker (the “service”) collects, why, and what you can do about it. The service is operated by DENIXYZ who is responsible for your data (the “controller”). Contact: [contact email not set].

1. What we collect

If you create an account

• Your email address and a password. The password is stored only as a salted hash by our authentication provider; we can't read it.
• If you sign in with Google instead: the basic profile details Google passes on (your name, email address and profile picture).
• Your plan, and how many lookups you've made today. This is a number only.

If you subscribe to Pro

• Payment is handled by Stripe. Your card or wallet details go straight to Stripe and never reach us.
• We keep the Stripe customer and subscription identifiers, the subscription's status and its renewal date, so we know whether your account is on Pro.

For everyone

• Usage limits. To apply the daily and per-minute limits, with or without an account, we keep counters next to a salted, one-way hash of your network address. We don't store the address itself in our database, and the counters hold numbers only.
• Lookups. The Roblox username or ID you enter is sent to our server, which asks Roblox for that account's public profile. A deep check also asks Roblox for that account's public friends list and for public details of the friends on it. We don't keep a history of what you look up, and lookups aren't linked to your account in our database. Results are held in server memory for about ten minutes so repeat lookups are fast, then discarded.
• Server logs. Our hosting providers automatically log requests (including IP address, time, and the address requested, which contains the username looked up) for security and troubleshooting. These logs are kept for a short period under each provider's own retention rules.
• Browser storage. The site keeps two things in your browser's local storage: your sign-in session, and a list of your recent lookups. The recent-lookups list stays on your device and is never sent to us.
• Emails. If you write to us, we keep the correspondence.

2. How we use it

• To run the service: sign you in, show results, apply daily limits, and switch Pro on or off (performance of our contract with you).
• To take payment and keep billing records (contract; legal obligation).
• To prevent abuse and keep the service secure (our legitimate interests).
• To show ads on the free tiers (legitimate interests, and your consent where the law requires it).
• To send service emails: confirming your address, resetting your password, and notices about your subscription or these policies. We don't send marketing email.

3. Advertising

Guests and free accounts see ads provided by Google AdSense. Pro accounts don't, and no advertising code is loaded for them.

• Google and its partners use cookies and similar identifiers to serve and measure ads, and may show ads based on your earlier visits to this and other websites.
• You can see how Google uses this information at policies.google.com/technologies/partner-sites, and turn off personalised ads at adssettings.google.com or aboutads.info/choices.
• If you're in the European Economic Area, the United Kingdom or Switzerland, you're asked for your choice before advertising cookies are used, and you can change it at any time from the privacy link in that message.
• In some US states, passing identifiers to an advertising partner for personalised ads counts as “sharing” or “selling” personal information. You can opt out with the Google settings above. Apart from that, we don't sell your personal information.

4. Roblox profile data

Results show information that Roblox already makes public about an account: its name, creation date, avatar, and counts such as friends, badges and items. We read it at the moment of a lookup, keep it in memory for about ten minutes, and don't build a database of Roblox users. If you hold a Roblox account and have a concern about how it appears here, contact us.

5. Who we share data with

Only the providers needed to run the service, each acting on our instructions or as an independent controller for its own service:

• Supabase — sign-in, database and server functions.
• Stripe — payments, invoices and the billing portal.
• Google — advertising on the free tiers, and sign-in if you choose “Continue with Google”.
• Cloudflare, GitHub Pages and jsDelivr — deliver the website's files; like any web host, they see your IP address when your browser loads them. If a “verify you are human” check appears when you sign in, it is run by Cloudflare.
• Roblox — our server sends the username you look up to Roblox. Roblox doesn't receive your IP address or identity from us.

We may also disclose information if the law requires it, or to protect the service and its users.

6. International transfers

These providers may process data in the United States and other countries. Where data leaves the EEA, the UK or Switzerland, it is protected by the providers' standard contractual clauses or an equivalent safeguard.

7. How long we keep it

• Account data — until you delete your account.
• Usage counters, including the ones kept against a hashed network address — deleted within a few days.
• Billing records — Stripe and we keep records of payments for as long as tax and accounting law requires, even after an account is deleted.
• Server logs and backups — removed automatically on our providers' schedules, typically within days to a few weeks.

8. Your choices and rights

• Delete your account at any time from your account page. That removes your account, plan and usage data from our database and cancels any subscription.
• Depending on where you live, you have the right to ask for a copy of your data, to have it corrected or erased, to object to or restrict how we use it, to receive it in a portable form, and to withdraw consent. Email us and we'll respond within one month.
• You can complain to your local data protection authority if you think we've handled your data wrongly.

9. Children

The service is not directed to children under 13, and accounts are for people aged 13 or over. We don't knowingly collect personal information from children under 13. If you believe a child has given us their information, contact us and we'll delete it.

10. Security

All traffic is encrypted in transit, passwords are stored hashed, and account data can only be read by the account's owner and by our server. No online service can promise perfect security; if we learn of a breach that affects you, we'll tell you as the law requires.

11. Changes

We'll post any changes here and update the date at the top. If a change is significant we'll also announce it on the site or by email.

12. Contact

[business name not set] · [contact email not set]