Privacy Policy

01

Overview

Bloxsell ("we," "us," "our") operates the Bloxsell website and marketplace service. This Privacy Policy describes how we collect, use, store, and share information when you use our platform.

Our legal basis for processing personal data depends on the data and context. We process data under the following bases: contractual necessity (to fulfill transactions), legitimate interests (fraud prevention, platform security), and consent (marketing communications, optional analytics).

We access only public Roblox profile data through Roblox's public API. We do not request, store, or have access to your Roblox account password or any non-public Roblox data.

02

Data We Collect

We collect different categories of data depending on how you interact with the Service.

Account & Identity Data

Roblox username & User ID

Collected when you connect your account. Used to verify identity and display on listings.

Contract

Display name & avatar

Pulled from Roblox's public API to personalize your seller profile.

Contract

Shop name

Entered by you during onboarding. Shown on your public listings.

Contract

Transaction Data

Listing details

Item name, asset ID, price, listing type, and timestamps. Stored for the duration of the listing and 24 months after completion.

Contract

Payout method & address

Cryptocurrency wallet addresses or PayPal email. Encrypted at rest. Used solely to process your payout.

Contract

Transaction history

Records of completed sales including amounts, dates, and Roblox item identifiers. Retained for legal and tax compliance.

Legal obligation

Technical & Usage Data

IP address

Logged for security monitoring, fraud detection, and rate limiting. Not linked to your identity in analytics.

Legitimate interest

Browser & device info

User agent, operating system, and screen resolution. Used for platform compatibility and debugging.

Legitimate interest

Usage patterns

Pages visited, actions taken, time on site. Aggregated and anonymized. Used to improve the platform.

Consent

03

How We Use Your Data

We use collected data only for the purposes outlined below. We do not use your personal data for advertising profiling or sell it to data brokers.

Purposes of Processing

Service operation

Processing listings, matching buyers and sellers, managing escrow, and releasing payouts.

Contract

Fraud & security

Detecting suspicious activity, preventing account abuse, and protecting the integrity of transactions.

Legitimate interest

Legal compliance

Retaining transaction records as required by applicable law. Responding to valid legal requests.

Legal obligation

Platform improvement

Analyzing aggregated usage data to improve features, performance, and user experience.

Legitimate interest

Communications

Sending trade notifications via Discord. Sending optional email updates about platform changes.

Contract / Consent

04

Data Sharing & Third Parties

We do not sell, rent, or trade your personal data. We share data only with trusted service providers necessary to operate the platform, and only to the extent required for that purpose.

Third-Party Services

Roblox Corporation

We query Roblox's public API to retrieve profile and inventory data. Subject to Roblox's own privacy policy.

API access only

Payment processors

PayPal for F&F payouts. Cryptocurrency transactions are processed on-chain — no third-party custodian.

Contract

Discord

Trade notifications and support are delivered via Discord. Only your Discord ID (if provided) is shared.

Consent

Cloud infrastructure

Servers and databases hosted on industry-standard cloud providers (AWS/Cloudflare). Data stored in encrypted form.

Legitimate interest

We may disclose personal data if required by law, court order, or governmental authority, or if we believe in good faith that disclosure is necessary to protect the safety of any person or the integrity of the platform.

05

Cookies & Tracking

We use a minimal set of cookies and similar technologies. We do not use third-party advertising cookies or cross-site tracking.

Cookie Types

Essential cookies

Required for the platform to function. Session management and security tokens. Cannot be disabled.

Necessary

Preference cookies

Storing your UI preferences (e.g., filters, sort order). Expires after 90 days.

Legitimate interest

Analytics cookies

Anonymous usage analytics (self-hosted, no data sent to Google). Can be disabled in your browser.

Consent

You can manage or delete cookies through your browser settings at any time. Disabling essential cookies will prevent you from using core platform features.

06

Data Retention

We retain your data only for as long as necessary to fulfill the purposes described in this Policy, or as required by law.

Active account data

Retained while your account is active and for 30 days after deletion request.

—

Transaction records

Retained for 7 years to comply with financial record-keeping requirements.

Legal obligation

Support communications

Retained for 2 years after the ticket is closed.

—

IP & security logs

Retained for 90 days then automatically purged.

—

Suspended account records

Retained indefinitely where fraud is confirmed, to prevent re-registration.

Legitimate interest

07

Your Rights

Depending on your jurisdiction, you may have some or all of the following rights regarding your personal data. To exercise any right, contact us at privacy@bloxsell.com. We will respond within 30 days.

Right to Access

Request a copy of all personal data we hold about you.

Right to Rectification

Request correction of inaccurate or incomplete data.

Right to Erasure

Request deletion of your data, subject to legal retention requirements.

Right to Object

Object to processing based on legitimate interests (e.g., analytics).

Data Portability

Receive your data in a structured, machine-readable format.

Withdraw Consent

Withdraw consent for optional processing (e.g., marketing emails) at any time.

If you believe we have not handled your data lawfully, you have the right to lodge a complaint with your local data protection authority. EU residents may contact their national supervisory authority.

08

Children's Privacy

Bloxsell is not intended for children under 13 years of age. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately at privacy@bloxsell.com and we will delete that information promptly.

For users aged 13–17, we require parental consent and apply additional data minimization practices. We do not display targeted advertising to users we know to be minors.

COPPA notice: If we discover that a user under 13 has created an account, that account will be suspended and all associated data deleted within 72 hours of discovery.

09

Security

We implement industry-standard technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or alteration.

Encryption in transit

All data transmitted between your browser and our servers is protected by TLS 1.3.

Always on

Encryption at rest

Sensitive fields (payout addresses, IP logs) are encrypted using AES-256 at the database level.

Always on

Access controls

Staff access to personal data is role-based and audited. Minimum-privilege principle enforced.

Always on

Breach notification

In the event of a data breach affecting your personal data, we will notify affected users within 72 hours of discovery.

Legal obligation

No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. If you suspect a security issue, please report it immediately to security@bloxsell.com.

10

Contact & Policy Updates

We may update this Privacy Policy periodically. When we make material changes, we will notify you via Discord announcement and, where required by law, seek fresh consent. The "Last updated" date at the top of this page will always reflect the most recent revision.

For privacy-related inquiries or to exercise your rights, contact our Data Protection team:

Email: privacy@bloxsell.com
Discord: #privacy-requests channel
Response time: Within 30 days of receipt