Privacy Policy

1. Information we collect

Account information

• Username, display name, email address, and password hash
• Optional profile details such as bio, website, and avatar
• Role and account status (buyer, seller, moderator, admin)

Roblox account linking

If you connect Roblox via OAuth, we may receive and store your Roblox user id, username/display name, profile link or avatar URL (if provided), link timestamp, and tokens needed to maintain or revoke the connection. We use this to verify identity for seller applications and related trust features. We do not receive your Roblox password.

Marketplace activity

• Seller applications, product listings, versions, images, and package metadata
• Cart, orders, credit balances, credit purchases, transactions, refunds, and download records
• Reviews, wishlists, messages, notifications, and user reports
• Moderation queue data, admin notes, and review decisions

Payments

Card payments and credit-pack purchases are processed by Stripe. Stripe receives payment details according to its own privacy policy. We store payment references (such as Checkout Session ids), purchase amounts, and fulfillment status — not full card numbers.

Uploaded files

Packages and images you upload are stored for delivery, scanning, and moderation. File contents may be inspected by automated scanners and authorized staff. Private packages are not publicly downloadable until approved under our rules.

Technical and security data

• IP address, user agent, session identifiers
• Login attempts, rate-limit records, security events, and audit logs
• Approximate timestamps of key actions (login, upload, download, admin actions)

2. How we use information

• Create and manage accounts, sessions, and roles
• Operate browsing, checkout, wallet, downloads, and seller tools
• Scan, moderate, approve, reject, suspend, or remove content
• Prevent fraud, abuse, malware distribution, and unauthorized access
• Send in-app notifications related to orders, moderation, messages, and applications
• Improve reliability, support, analytics, and platform safety
• Comply with legal obligations and enforce our Terms of Service

3. Legal bases (where applicable)

If you are in a region that requires a legal basis for processing (such as the EEA/UK), we typically rely on: contract performance (providing the marketplace), legitimate interests (security, abuse prevention, service improvement), consent (where required, such as certain optional connections), and legal obligations.

4. Sharing of information

We do not sell your personal information. We may share information with:

• Other users — public profile fields, seller storefront info, published listings, and reviews you post
• Service providers — hosting, database, email, payment, or security vendors that process data on our behalf
• Roblox — when you choose to authorize Roblox OAuth; Roblox’s own policies then apply to their processing
• Authorities — if required by law, legal process, or to protect users and the platform from serious harm

Administrators and moderators may access account, content, and security data needed to review applications, listings, reports, and incidents.

5. Cookies and sessions

We use essential session cookies to keep you logged in, protect against CSRF, and maintain security controls. These are required for the service to function. We do not use third-party advertising cookies as part of the core marketplace experience.

6. Data retention

We retain account and marketplace records for as long as your account is active and as needed to provide the service, resolve disputes, meet legal requirements, and maintain security history. Security logs, audit trails, downloads, and moderation records may be kept longer when necessary for abuse investigation. You may request account deletion; some records may remain in anonymized or legally required form.

7. Security

We use measures such as password hashing, CSRF protection, role-based access, session controls, upload scanning, and audit logging. No method of transmission or storage is perfectly secure. If you believe your account has been compromised, change your password and contact us promptly.

8. Children’s privacy

Devinity is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have done so, contact us and we will take appropriate steps to delete the information.

9. International processing

The service may be hosted and operated in locations different from where you live. By using Devinity, you understand that your information may be processed in those locations subject to this Policy and applicable law.

10. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, or export personal data, or to object to/restrict certain processing. You can update some profile information in your account, unlink Roblox from your dashboard (where available), and request further help from the site operator.

If we rely on consent for a specific processing activity, you may withdraw consent prospectively without affecting prior lawful processing.

11. Third-party links and platforms

Listings or profiles may contain links to external sites or Roblox pages. Their privacy practices are governed by their own policies. This Policy applies only to Devinity Market.

12. Changes to this Policy

We may update this Privacy Policy periodically. The “Last updated” date will change when we do. Material changes may also be highlighted in-product when practical. Continued use after an update means you acknowledge the revised Policy.

13. Contact

Privacy questions or data requests: contact the Devinity Market operator for the domain market.codekiruna.se.

Related terms: Terms of Service.