Privacy Policy
Last updated 31 August 2026
This policy explains what Game Market collects, why, and what you can do about it. It covers two different groups of people, and it is worth being clear about that up front, because the answers differ:
- Users — people who create a Game Market account.
- Roblox creators — people whose publicly visible Roblox games, profiles and groups appear in our directory, whether or not they have ever used Game Market. Section 6 is for you.
1. Who we are
Game Market is operated by ELECTRICO STUDIOS LIMITED, a company registered in England and Wales, company number 16918131, registered office 33 Lawrence Avenue, Stevenage, England, SG1 3JX. We are the data controller for the processing described here. We are registered with the UK Information Commissioner’s Office under reference ZC145460.
For anything in this policy, including requests to be removed from the directory: [email protected].
2. What we collect from account holders
| Data | Where it comes from | Why |
|---|---|---|
| Roblox user ID | Roblox sign-in | Identifies your account and matches you to games you have claimed |
| Email address | Your subscription checkout, or entered by you for a sign-in link | Sign-in, billing correspondence, service notices |
| Subscription status, plan, and Paddle customer and subscription identifiers | Our payment provider | To know what your account is entitled to |
| Your tracked list | You | The core paid feature |
| API key hashes, labels, and last-used time | Generated when you create a key | Authenticating the browser extension |
| Roblox group role labels | Roblox, with your explicit consent, at the moment you claim a group-owned game | To confirm your role in that group entitles you to claim the game |
What we deliberately do not keep
- No Roblox access tokens. When you sign in with Roblox, or grant group access to claim a game, we use the token once and discard it. We never request offline access and store no refresh token, so we cannot act on your Roblox account at any later time.
- No payment card details. These go directly to our payment provider and never reach our systems.
- No usable API keys. We store only a SHA-256 hash. A key is shown once, when created, and cannot be recovered afterwards — by you or by us.
- No usable sign-in links. Sign-in tokens are stored hashed, are single-use, and expire.
- No passwords, because there are none.
3. Cookies
One cookie, set when you sign in, holding a signed session token. It is strictly necessary to keep you signed in, so we do not ask for consent to set it. It is HttpOnly and Secure, and it is not used for advertising or cross-site tracking. We run no third-party analytics or advertising on this site.
4. Legal bases
| Processing | Basis |
|---|---|
| Running your account and providing the service | Performance of a contract |
| Taking payment, keeping tax and accounting records | Contract; legal obligation |
| Reading your Roblox group role when you claim a game | Consent, given at that moment in Roblox’s own consent screen, and withdrawable in your Roblox account settings |
| Collecting and publishing public Roblox activity (section 6) | Legitimate interests |
| Security, abuse prevention, rate limiting | Legitimate interests |
5. Who we share it with
We do not sell personal data, and we do not offer bulk export or resale of the data we collect. We use these processors:
| Provider | For |
|---|---|
| Cloudflare | Hosting, database, storage, DNS and bot protection |
| Paddle | Payments. Paddle is the merchant of record and an independent controller for payment data — see Paddle’s own privacy notice |
| Resend | Sending sign-in and service emails |
| Anthropic | Classifying public game metadata. No account-holder personal data is sent |
| Hetzner | The server that runs our collector |
Some of these process data outside the UK. Where they do, transfers rely on the UK International Data Transfer Agreement or Addendum, or on adequacy regulations.
6. If you are a Roblox creator in our directory
This section applies whether or not you have ever used Game Market.
We collect information that Roblox already publishes to anyone: game names, descriptions, thumbnails, player counts, visit counts, ratings, creation and update dates, and the public profile or group that publishes them. We collect it repeatedly so that we can show how it changes over time. We do not access private data, we do not sign in to Roblox to collect it, and we do not attempt to defeat any access control.
Where that information identifies a person, it is personal data even though it is public, and we process it under legitimate interests: there is a genuine interest in a market-analytics service for developers, public activity history cannot be reconstructed after the fact so it must be recorded as it happens, and we judge the impact low because we publish nothing that Roblox does not already publish and add no private information. We have weighed this against your interests and rights, and section 7 is how you push back.
Removal and objection
You can ask us to remove you. Email [email protected] from an address we can tie to the profile, or contact us from the Roblox account itself, and we will delist your profile, your groups and your games. We will confirm when it is done. We will not ask you to justify the request.
7. Your rights
Under UK GDPR you may request access to your data, correction, erasure, restriction, portability, and you may object to processing based on legitimate interests. To exercise any of these, email [email protected]. We respond within one month.
You can delete your Game Market account at any time, which removes your account record, your tracked list and your keys. Where we must keep transaction records for tax purposes, we keep only those records.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk, though we would rather you told us first.
8. How long we keep things
Account data lasts as long as the account, plus 30 days. Sign-in tokens expire in minutes and are deleted. Payment records are kept for seven years, as UK tax law requires. Public Roblox history is kept indefinitely, because a history that is deleted is not a history — unless you ask for removal under section 6.
9. Children
Game Market is a business tool for game developers and is not directed at children. You must be 13 or older to hold an account, and 18 or older to subscribe. We do not knowingly create accounts for younger users; if you believe we have, tell us and we will delete it.
10. Changes
If we change this policy materially we will update the date at the top and, for account holders, email you before it takes effect.