Privacy Policy

Elite Roblox Market ("we", "us") is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights.

1. Data We Collect

From Discord OAuth (when you sign in):

• Discord user ID, username, avatar
• Email address (if provided by Discord)

From your activity on the platform:

• Scripts, listings, and content you create
• Orders, messages, and reviews
• Last seen timestamp (for online status indicator)
• Profile information you voluntarily provide (bio, social links)

From Stripe (payment processing):

• Stripe customer ID
• Subscription status and billing period
• Payment method details are handled entirely by Stripe - we never see or store card numbers

Automatically collected:

• Standard server logs (IP address, browser type, pages visited)
• Cloudflare analytics (aggregated, no personal tracking)

2. How We Use Your Data

• To provide and operate the platform (account management, orders, buyer protection)
• To show your online status to other users (last seen time)
• To process payments and subscriptions via Stripe
• To display your public profile (username, avatar, stats)
• To send transaction receipts (via Stripe's email system)
• To detect and prevent fraud and abuse
• To improve the platform based on usage patterns

3. Data Sharing

We do not sell your personal data. We share data only with:

• Stripe - for payment processing (Stripe Privacy Policy)
• Discord - for authentication only (Discord Privacy Policy)
• Cloudflare - for hosting and DDoS protection
• Railway / Vercel - for infrastructure hosting
• Cloudflare R2 - for image storage

We may share data with law enforcement if required by law.

4. Public Information

The following information is publicly visible to all users:

• Your username and avatar
• Your scripts, listings, and reviews
• Your total sales count and rating
• Your online status (active in last 5 minutes)
• Your subscription tier badge

5. Data Retention

We retain your account data for as long as your account is active. Order records are retained for 7 years for legal and financial compliance. You may request deletion of your account and associated data at any time (see Section 7).

6. Cookies

We use a single session cookie (erm_session) to keep you logged in. We do not use tracking cookies or third-party advertising cookies. Stripe may set cookies for fraud prevention during checkout.

7. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data (via account settings)
• Delete your account and personal data
• Export your data in a portable format
• Opt out of non-essential communications

To exercise these rights, contact us via Support or Discord. Account deletion requests are processed within 30 days. Note: some data may be retained for legal compliance (e.g. completed transaction records).

8. Children's Privacy

This platform is not intended for children under 13. We do not knowingly collect data from children. If you believe a child has provided us with personal information, contact us immediately.

9. Security

We use industry-standard security practices including HTTPS, encrypted connections to our database, and Stripe's certified payment infrastructure. However, no system is 100% secure. Use a strong, unique password on your Discord account.

10. Changes to This Policy

We may update this policy. Material changes will be announced on the platform. Continued use after changes constitutes acceptance.

11. Contact

Privacy questions or data requests: reach us via the Support Center.