Privacy Policy
Last updated: July 2, 2026
1. Overview
This Privacy Policy explains how Roflip ("we," "us," "our") collects, uses, and protects information when you use our Service. By using Roflip, you agree to the practices described here.
2. Data we collect
We collect the following categories of data:
- Account information — your Roblox username, display name, and Roblox user ID, used to link and identify your ROFLIP account.
- Session data — a signed authentication token stored in an httpOnly cookie, used to keep you logged in.
- Balance & activity — your in-Service balance and gameplay history, used to operate the games and resolve disputes.
- Technical data — IP address, browser type, and device information, collected automatically for security and abuse prevention.
3. Roblox account data
To link your Roblox account, we request public information from Roblox's public APIs, including your username, display name, user ID, and avatar image. Where an account has already been claimed on ROFLIP, we may temporarily read your public profile bio to confirm you added a one-time verification code, as proof that you control the account. This bio check is performed once at verification time and is not monitored continuously.
We do not access private Roblox data, and we never request or store your Roblox password. ROFLIP is not affiliated with Roblox Corporation, and this policy governs only ROFLIP's use of data, not Roblox's.
4. How we use your data
We use collected data to:
- Create and maintain your account;
- Operate games, process balances, and resolve disputes;
- Verify account ownership and prevent fraud;
- Maintain the security and integrity of the Service; and
- Comply with legal obligations.
We do not sell your personal data to third parties.
7. Data retention
We retain account data for as long as your account remains active, and for a reasonable period afterward as needed to comply with legal obligations, resolve disputes, and enforce our agreements.
8. Your rights
Depending on your jurisdiction, you may have rights to access, correct, delete, or export your personal data, or to object to certain processing. To exercise these rights, contact us through the support options available on the Service.
9. Security
We use industry-standard measures, including encrypted connections and signed session tokens, to protect your data. No system is completely secure, and we cannot guarantee absolute security of information transmitted to the Service.
10. Children's privacy
The Service is not directed to individuals under 18. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, please contact us so we can remove it.
11. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected in the "Last updated" date above. Continued use of the Service after changes are posted constitutes acceptance of the updated policy.
12. Contact
Questions about this Privacy Policy can be directed to our support team through the contact options available on the Service.