1. Who we are
This Privacy Policy explains what personal data TokenBlox ("we", "us") collects when you use the TokenBlox website, Discord server and Discord bot, why we use it, and your rights. TokenBlox is the data controller for this data under the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018. Contact: [email protected].
2. What we collect
From Discord when you sign in: your Discord user ID, username, display name, avatar and whether you are a verified member of the TokenBlox Discord server.
From accounts you choose to link: for Roblox, your Roblox user ID, username, display name and profile link; for Twitch, your Twitch user ID and username. We never receive your passwords for these services.
What you give us: your display name, region, platform, settings and preferences, match chat messages, evidence links, support tickets and replies, reports about other players, and anything you send us by email.
What happens on TokenBlox: matches, results, ratings, achievements, tournaments, teams, Token transactions, shop purchases, VIP, tips, referrals, notifications and moderation history.
Technical data: your IP address, browser and device type, sign-in sessions, the pages and actions you use, and dates and times. We use IP addresses mainly for security and to detect several accounts playing from the same connection.
We do not collect payment card details, and we do not knowingly collect data about anyone under 18.
3. Why we use it and our legal basis
- To provide the Service (contract): signing you in, running matches, tournaments, Token balances, the shop, VIP, tips, notifications and support.
- To keep TokenBlox fair and safe (legitimate interests): preventing cheating, multiple accounts, collusion, fraud and abuse; same-connection checks; rate limits; investigating disputes and reports; enforcing our Terms.
- To improve the Service (legitimate interests): fixing bugs and understanding which features are used.
- To meet legal obligations (legal obligation): for example responding to lawful requests from authorities and keeping records the law requires.
- Discord DMs and optional messages (consent or legitimate interests): you can turn Discord DMs off at any time in Settings → Notification preferences.
4. Automated checks
Some safety checks run automatically, such as blocking a match between two accounts on the same internet connection, expiring matches nobody joins and limiting how fast requests can be sent. These checks can stop an action, but they do not make decisions with legal or similarly significant effects on you, and you can always ask staff to review your case through Support.
5. What other players can see
Your TokenBlox username, display name, avatar and profile items, rank, rating, statistics, match and tournament history, achievements, VIP badge and linked Roblox username are visible to other signed-in players. Your Discord ID can be copied from your player card. Private player markers are only visible to the person who made them. Streamer Mode lets you hide some details on your own screen.
6. Who we share data with
We never sell your personal data. We only share it with:
- service providers who host and run TokenBlox for us (for example hosting and storage providers), under contracts that protect your data;
- Discord, to run the Discord bot, ticket rooms and DMs;
- Roblox or Twitch, only when you choose to link an account;
- professional advisers such as lawyers and accountants;
- the police, regulators or courts when the law requires it, or to protect the rights, safety or property of TokenBlox, our players or others;
- a buyer or successor if TokenBlox is ever reorganised, merged or sold.
7. International transfers
Some of our providers (including Discord) may process data outside the UK. When that happens we rely on UK adequacy regulations or appropriate safeguards such as the UK International Data Transfer Agreement or Addendum.
8. How long we keep data
- Account and profile data: while your account is open, and deleted or anonymised within 90 days after it is closed, except as below.
- Token transactions, match results, tournament results and moderation and anti-fraud records: up to 6 years, so we can deal with disputes, prevent banned players from returning and meet legal obligations.
- Support tickets and match chat: up to 2 years.
- Security logs, including IP addresses: up to 12 months.
9. Your rights
Under UK data protection law you have the right to: access a copy of your data; correct data that is wrong; ask us to delete your data; restrict or object to how we use it; receive your data in a portable format; and withdraw consent where we rely on consent. Some rights have legal exceptions, for example we may keep records needed to prevent fraud or comply with the law.
To use your rights, email [email protected] from, or mentioning, your Discord username. We may need to confirm it is you. We reply within one month and it is free.
If you are unhappy with how we handle your data, please contact us first. You can also complain to the UK Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
10. Security
We protect your data with encrypted connections, limited staff access, sign-in sessions that can be revoked, security headers, rate limits and audit logs of staff actions. No online service can be completely secure, so please keep your Discord account secure and tell us immediately if you notice anything suspicious.
11. Cookies
TokenBlox only uses essential cookies: a session cookie that keeps you signed in, and a short-lived security cookie used while you link a Roblox or Twitch account. We do not use advertising or tracking cookies, so no cookie choices are needed. Your browser may also store small settings, such as a remembered filter, on your own device.
12. Children
TokenBlox is only for people aged 18 and over. If we learn that we hold data about someone under 18, we will close the account and delete the data unless we must keep it for legal or safety reasons. If you think a child is using TokenBlox, please contact us.
13. Changes to this policy
We may update this Privacy Policy. The date at the top shows the latest version, and we will tell you on the website or by notification about important changes.
Questions? Email [email protected].