Privacy Policy
Last updated 22 October 2026
This policy explains what Game Market collects, why, and what you can do about it. It covers two different groups of people, and it is worth being clear about that up front, because the answers differ:
- Members — people we have let in, who can use Game Market. An account exists only for someone we let in: either we created it for your Roblox user id, or you signed in through an invite link we sent you. If you sign in with Roblox without either, we create no account, and your Roblox user id is not written to our database or to our logs.
- Roblox creators — people whose publicly visible Roblox games, profiles and groups appear in our directory, whether or not they have ever used Game Market. Section 6 is for you.
1. Who we are
Game Market is operated by ELECTRICO STUDIOS LIMITED, a company registered in England and Wales, company number 16918131, registered office 33 Lawrence Avenue, Stevenage, England, SG1 3JX. We are the data controller for the processing described here. We are registered with the UK Information Commissioner’s Office under reference ZC145460.
For anything in this policy, including requests to be removed from the directory: [email protected].
2. What we collect from account holders
| Data | Where it comes from | Why |
|---|---|---|
| Roblox user ID | Roblox sign-in, or us when we add you | Identifies your account and marks your own developer profile in the directory as yours |
| Email address, only if you give us one | You | Telling you about changes to your account or to this policy |
| Membership status | Us, when we add you or when you use an invite | To know whether your account can see the dashboard |
| Which invite let you in | The invite link you used | A record of who invited whom, kept with your account |
| Your tracked list | You | The core feature |
| API key hashes, labels, and last-used time | Generated when you create a key | Authenticating the browser extension |
What we deliberately do not keep
- No Roblox access tokens. When you sign in with Roblox we use the token once, to learn your user id, and discard it. We ask Roblox only for your user id and username, never request offline access and store no refresh token, so we cannot act on your Roblox account at any later time.
- No usable API keys. We store only a SHA-256 hash. A key is shown once, when created, and cannot be recovered afterwards — by you or by us.
- No usable invite codes. Invite codes are stored only as a hash, work once, and expire.
- No passwords, because there are none.
The browser extension
The Game Market Chrome extension is a side panel that shows the same data as this website. It talks only to our own API at api.gamemarket.dev; it has no access to any other website, including roblox.com, and reads nothing from the pages you visit. On your device it stores your sign-in key and your panel settings, in Chrome’s storage for the extension. Signing in opens our own sign-in page; the extension reads no data from your Google account.
Crash reports
If the website or the extension hits an error, it sends us a short report so we can fix it: the error message and where in our code it happened, the page path within Game Market (never a query or anything you typed), the app version, and your browser’s user-agent. A report carries no account and no key, and we do not store your IP address with it. We keep at most 200 a day, for 14 days.
3. Cookies
One cookie, set when you sign in, holding a signed session token. It is strictly necessary to keep you signed in, so we do not ask for consent to set it. It is HttpOnly and Secure, and it is not used for advertising or cross-site tracking. We run no advertising on this site. For page counts only, we use Cloudflare Web Analytics, which is cookieless: it sets no cookies, collects no personal data and does no cross-site tracking.
4. Legal bases
| Processing | Basis |
|---|---|
| Running your account and providing the service | Performance of a contract |
| Collecting and publishing public Roblox activity (section 6) | Legitimate interests |
| Security, abuse prevention, rate limiting | Legitimate interests |
5. Who we share it with
We do not sell personal data, and we do not offer bulk export or resale of the data we collect. We use these processors:
| Provider | For |
|---|---|
| Cloudflare | Hosting, database, storage, DNS and bot protection |
| Anthropic | Classifying public game metadata. No account-holder personal data is sent |
| Hetzner | The server that runs our collector |
Some of these process data outside the UK. Where they do, transfers rely on the UK International Data Transfer Agreement or Addendum, or on adequacy regulations.
6. If you are a Roblox creator in our directory
This section applies whether or not you have ever used Game Market.
We collect information that Roblox already publishes to anyone: game names, descriptions, thumbnails, player counts, visit counts, ratings, creation and update dates, and the public profile or group that publishes them. We collect it repeatedly so that we can show how it changes over time. We do not access private data, we do not sign in to Roblox to collect it, and we do not attempt to defeat any access control.
Where that information identifies a person, it is personal data even though it is public, and we process it under legitimate interests: there is a genuine interest in a market-analytics service for developers, public activity history cannot be reconstructed after the fact so it must be recorded as it happens, and we judge the impact low because we publish nothing that Roblox does not already publish and add no private information. We have weighed this against your interests and rights, and section 7 is how you push back.
Removal and objection
You can ask us to remove you. Email [email protected] from an address we can tie to the profile, or contact us from the Roblox account itself, and we will delist your profile, your groups and your games. We will confirm when it is done. We will not ask you to justify the request.
7. Your rights
Under UK GDPR you may request access to your data, correction, erasure, restriction, portability, and you may object to processing based on legitimate interests. To exercise any of these, email [email protected]. We respond within one month.
You can delete your Game Market account at any time, which removes your account record, your tracked list and your keys.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk, though we would rather you told us first.
8. How long we keep things
Account data lasts as long as the account, plus 30 days. Invite codes expire within 30 days of being issued; the record of which account used one is kept as long as that account. Public Roblox history is kept indefinitely, because a history that is deleted is not a history — unless you ask for removal under section 6.
9. Children
Game Market is a business tool for game developers and is not directed at children. You must be 13 or older to hold an account. We do not knowingly create accounts for younger users; if you believe we have, tell us and we will delete it.
10. Changes
If we change this policy materially we will update the date at the top and, for account holders, email you before it takes effect.