Privacy

Your Roblox password, and your .ROBLOSECURITY cookie. We never ask for either, and the system is built so that neither is ever needed. Nobody who asks for them is us.

Card numbers. Payments go through a payment processor. We receive a reference and a status, never the card.

We do not sell your data, and we do not run advertising trackers on this site.

Your username, Roblox username, verification status and delivery record are public on this site. That is the point of a delivery record — a buyer has to be able to check who they are trading with. Your email, date of birth, balance and order history are not public.

Running the service means some data passes through other companies. They only ever receive what their part of the job needs, and none of them are allowed to use it for anything else. In full, so you can look them up rather than take our word for it:

We set one kind of cookie: the one that keeps you signed in. Without it you would have to log in again on every page. It is removed when you sign out.

There are no advertising cookies, no analytics trackers, and no third-party pixels on this site. Nothing here follows you elsewhere.

Concretely, rather than “as long as necessary”:

Financial records cannot be deleted. Every movement of money is written to an append-only ledger, which is what allows a balance to be argued about months later and what stops anyone quietly rewriting it. If you ask us to delete your data, we can remove your profile and personal details, but the ledger entries recording what was paid and to whom remain — with your identifying information removed from them where we are able.

Ticket channels are archived rather than deleted, because a middleman service is regularly asked to adjudicate a trade weeks after it happened.

Wherever you live, you can ask us to show you what we hold, correct it, delete it, or stop using it a particular way. Email privacy@skater.limited or ask in the Discord. We answer within 30 days, and it is free.

The one thing we cannot do is erase the ledger — see above. We can strip your identifying details from it, but the record that money moved has to survive.

The GDPR applies to us regardless of where we are. We process your data on these grounds:

You can also ask for your data in a portable format, object to processing based on legitimate interest, and complain to your local data protection authority if you are unhappy with how we respond. Your data is stored in the United States; transfers rely on standard contractual clauses with the providers listed above.

Under the CCPA and CPRA you can ask what personal information we collect and why, ask for a copy, ask us to delete or correct it, and opt out of its sale or sharing.

We do not sell or share your personal information, and we never have, so there is nothing to opt out of — but the right exists and this is us stating it. Asking us anything above will never get your account treated differently.

Access to your data is enforced by the database itself rather than by application code, so a bug in a page cannot expose another person's rows. Two-factor authentication is available and we recommend it on any account holding a balance.

No system is perfect. If we ever suffer a breach affecting your data, we will tell you and the relevant regulator within 72 hours of finding out, say what was taken, and say what we are doing about it. Plainly and quickly, rather than quietly.

Skater is not for anyone under 18. We do not knowingly collect data from children. If you believe a child holds an account here, tell us in the Discord and we will close it and delete what we hold.