Privacy Policy

When you create an account, place an order, or contact us, we may collect the following categories of personal information:

• Email address — used for account registration, order confirmations, and support communications.
• Roblox username — required to deliver your purchased in-game items.
• IP address & device data — collected automatically for security, fraud prevention, and analytics purposes.
• Order history — a record of your purchases, delivery status, and any support interactions.
• Payment metadata — our payment processor (Shopify) provides us with non-sensitive transaction details (e.g., last 4 digits, card type, transaction ID). We never store your full card number or CVV.

We use the data we collect for the following purposes:

• Order fulfillment — to deliver your in-game items to the correct Roblox account.
• Customer support — to respond to your inquiries, resolve disputes, and provide assistance.
• Fraud prevention — to detect and prevent unauthorized access, chargebacks, and fraudulent activity.
• Service improvement — to understand how our platform is used and make it better for everyone.
• Communications — to send you transactional emails (order confirmations, delivery updates). We do not send marketing emails without your explicit consent.

We will never sell, rent, or trade your personal information to third parties for marketing purposes.

Bloxyra uses a minimal number of cookies to ensure the site functions correctly and to improve your experience. Specifically, we use:

• Session cookies — to keep you logged in during your visit.
• Preference cookies — to remember your settings (e.g., selected game, cart state).
• Vercel Analytics — a privacy-friendly analytics solution that does not use personal identifiers or cross-site tracking. No cookie consent banner is required for this service.

We do not use Google Analytics, Meta Pixel, or any other invasive advertising trackers. You can disable cookies in your browser settings, though some site features may not function as expected.

Bloxyra uses the following third-party services to operate. Each has its own privacy policy and data practices:

• Shopify — payment processing. Handles all card data securely under PCI DSS compliance.shopify.com/legal/privacy
• Supabase — database and authentication. Stores your account and order data on secure, encrypted servers.supabase.com/privacy
• Tawk.to — live chat support. May collect chat transcripts and your IP address during a support session.tawk.to/privacy-policy
• Vercel — website hosting and analytics. Processes request data such as IP addresses for performance and security purposes.vercel.com/legal/privacy-policy

We retain your personal data for as long as your account is active or as needed to provide our services. Specifically:

• Account data is retained until you request account deletion.
• Order records are kept for up to 2 years for legal and fraud prevention purposes.
• Support chat logs may be retained for up to 1 year.
• Payment records are retained as required by financial regulations (typically 7 years).

Upon a valid deletion request, we will remove your personal data within 30 days, except where retention is required by law.

Depending on your location, you may have the following rights regarding your personal data:

• Right to Access — request a copy of the personal data we hold about you.
• Right to Deletion— request that we delete your personal data (“right to be forgotten”).
• Right to Rectification — request correction of inaccurate or incomplete data.
• Right to Opt-Out — California residents may opt out of the sale of personal data (we do not sell data, but this right applies nonetheless).
• Right to Portability — request your data in a machine-readable format.

To exercise any of these rights, email us at support@bloxyra.com. We will respond within 30 days.

Bloxyra is intended for users aged 13 and older. We do not knowingly collect personal information from children under the age of 13. If we become aware that a child under 13 has provided us with personal data without verifiable parental consent, we will take steps to delete that information promptly.

If you believe your child has provided us with personal information without your consent, please contact us at support@bloxyra.com.

We may update this Privacy Policy from time to time. When we do, we will revise the Effective Date at the top of this page. For significant changes, we will notify registered users by email. Your continued use of Bloxyra after any changes constitutes your acceptance of the updated Privacy Policy.

We encourage you to review this policy periodically to stay informed about how we protect your information.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: