Privacy Policy

1. Introduction & Scope

Welcome to RBXDL (https://rbxdl.johnmarctumulak.com), an independent developer utility and asset inspection platform built for content creators and studio development workflows.

We respect and prioritize your privacy. This Privacy Policy outlines what information is collected, how it is handled, and your options when accessing our website, redeeming access keys, or authenticating via our Discord OAuth 2.0 integration.

2. Information We Collect

We adhere to strict data minimization principles. We only collect the bare minimum data required to deliver core functionality:

• Discord OAuth 2.0 Account Information: When signing in with Discord to access the Creator Portal, we request only the standard identify scope:
  • Your public Discord User ID (used as your unique account identifier).
  • Your Discord Username, Global Display Name, and public Avatar URL.
  We NEVER request or have access to your Discord password, email address, direct messages, or connected servers.
• Access Key & Subscription Records: When you redeem or claim an Access Key (whether through community events or our official in-game store), we store the key code, active plan duration, and expiration timestamp linked to your account identifier to grant access privileges.
• Operational & Security Logs: When communicating with our services, standard operational telemetry (such as IP address, request timestamp, user-agent string, and error codes) is temporarily recorded to prevent DDoS attacks, mitigate automated bot abuse, and enforce concurrency and rate limits.
• No Sensitive Financial or Platform Credentials: We do not store credit card details, billing addresses, or private third-party platform credentials. In-game key purchases are processed entirely within the native platform payment infrastructure.

3. How We Use Your Information

Collected data is strictly used for the following operational needs:

• Authenticating your session and keeping you signed in across browser tabs.
• Verifying active Access Key status, remaining plan duration, and personal transaction logs.
• Managing queue states and active job concurrency to protect server stability.
• Defending against malicious traffic, automated scrapers, and denial-of-service attempts.

We do not sell, lease, monetize, or distribute your personal data or user identity to third-party marketing or advertising networks.

4. Cookies & Persistent Storage

RBXDL utilizes first-party HTTP cookies and local browser storage solely for security and essential session persistence:

• Authentication & Session Cookies: Encrypted, secure cookies that keep your Creator Portal account logged in across tabs and browser restarts so you do not have to repeatedly sign in.
• CSRF Protection: Standard cryptographic tokens preventing Cross-Site Request Forgery attacks.
• Local Browser State: Temporary in-browser state flags to prevent duplicate background downloads across concurrent tabs.

5. Data Retention & Deletion

You have full autonomy over your account and data footprint:

• Revoke Authorization: You can disconnect and revoke RBXDL's OAuth permissions at any time directly in your Discord client under:
  User Settings → Authorized Apps → Deauthorize.
• Account & History Deletion: If you wish to permanently delete your associated account records, transaction logs, and key history from our database, contact our support team via our official Discord community. Verified deletion requests are executed within 48 hours.

6. Inquiries & Support

For privacy concerns, support requests, or data deletion inquiries, please reach out via our official community channels: