Privacy policy.

Bloxyblox runs a minimal-collection model. We store the following:

• Voter ID cookie — a random opaque identifier generated when you cast your first vote, used to prevent duplicate votes and to remember which codes you marked as used. No personal data, no email, no account.
• IP hash — a salted SHA-256 hash of your IP address, used as a secondary dedup layer on votes. Original IPs are never stored.
• Page request logs — standard server logs (URL, timestamp, user agent) retained for up to 30 days for operational debugging.

• Roblox usernames or in-game data of any kind.
• Email addresses (we have no account system).
• Browser fingerprints, canvas hashes, or behavioural tracking.
• Cross-site cookies.
• Geolocation beyond what an IP coarsely implies.

The only first-party cookie is the voter-ID cookie described above. It is set lazily — your first visit does not set any cookie until you cast a vote.

The only third-party cookies set are Google Analytics (_ga, _ga_*) for pageview measurement, governed by Google's privacy policy. No video embeds, no social widgets, no ad networks.

We run two analytics providers in parallel to measure traffic and catch outages:

• Google Analytics 4 — anonymized client measurement (page views, referrer host, country, device class). IP anonymization is enabled. GA may set the cookies listed in the Cookies block above.
• Rybbit — a privacy-respecting, cookieless analytics service. No persistent identifiers, no cross-site tracking, and no data sold or shared with third parties.

You can opt out by enabling Do Not Track in your browser (respected by both providers) or by blocking the analytics scripts in your content blocker — site functionality is unaffected.

Codes and scripts pages link out to external publisher pages and script upstreams (e.g. GitHub, Pastebin). Your visit to those sites is governed by their respective privacy policies.

Roblox attracts a younger audience. We do not knowingly collect personal data from anyone — including users under 13. The voter-ID cookie is opaque and anonymous. If you believe a child has shared identifying data with us, email the contact below and we will purge any matching records.

To request deletion of your voter-ID cookie record, clear your browser cookies for this domain. The associated row is purged automatically on the next sweep when no fresh activity is seen. For server-log requests, email [email protected] with enough detail (date range, source IP region) for us to find the entries.

We update this page when the data flow changes. Major changes get a banner on the homepage for one week.

Questions: /contact or [email protected].