Privacy Policy
Last updated: January 2026
This Privacy Policy describes how AndalucĂa:RP ("we", "us", or "our") handles information in connection with Roleplay Overlay (the "Service"). We are committed to protecting your privacy and being transparent about our practices.
1. Important Notice: No Message Storage
đź”’ Your Messages Are Private
We do NOT store, log, archive, or retain any messages or chat content. All communications through Roleplay Overlay are transmitted in real-time only. Messages are immediately discarded from server memory after delivery. We have no ability to retrieve, review, or access any past messages.
2. Information We Collect
We collect minimal information necessary to provide the Service:
2.1. Information from Roblox OAuth
When you authenticate through Roblox, we receive:
- Roblox User ID - Your unique Roblox identifier
- Roblox Username - Your current Roblox display name
- Profile Picture URL - Link to your Roblox avatar image
2.2. Technical & Security Data (Legitimate Interest)
To ensure the security of the Service and to prevent abuse (such as ban evasion, spam, or DDoS attacks), we collect specific connection data based on our Legitimate Interest (GDPR Art. 6.1.f):
- Installation ID: A unique identifier for your app installation.
- Connection Metadata: We retain the IP Address, User ID, and Timestamps (connection/disconnection time).
- Retention Period: This security data is retained for a maximum of 6 months. After this period, it is automatically deleted unless required for an active investigation.
Note: This technical metadata is strictly restricted. It is NOT used for commercial purposes and is only accessible to the Data Controller for security and moderation.
2.3. Report Data
If you submit a report, we collect:
- Reporter's Roblox User ID and username
- Reported user's Roblox User ID and username
- Report reason and any additional details you provide
- Timestamp of the report
2.4. Marketplace Data
If you interact with the Theme Marketplace, we process:
- Uploaded Themes: If you upload a theme, your Roblox Username is publicly associated with that theme as the author.
- Usage Statistics: We collect aggregate data on theme downloads and ratings to rank popular content.
3. Information We Do NOT Collect
đź“‹ We specifically do NOT collect or store:
- Messages, chat content, or communications
- Personal contact information (email, phone, address)
- Payment information (the Service is free)
- Location data
- Device identifiers beyond installation ID
- Browsing history or activity outside the app
4. How We Use Information
| Data | Purpose | Retention |
|---|---|---|
| Roblox User ID/Username | Account identification, display in chat | While account is active |
| Profile Picture | Display in chat interface | Fetched in real-time, not stored |
| Session Data | Route messages to correct recipients | Session duration only |
| Report Data | Moderation and safety | Until resolved + backup period |
| Marketplace Content | Public display and distribution | Until removed by author/admin |
5. Data Sharing
We do not sell, trade, or rent your personal information. We may share data only in these limited circumstances:
- With Other Users - Your username and messages are visible to other users in your current scene/channel
- With Moderators - Report information is accessible to volunteer moderators
- Legal Requirements - If required by law, court order, or legal process
- Safety - To protect the rights, property, or safety of users or others
6. Data Security
We implement appropriate security measures to protect your information:
- Encrypted WebSocket connections (WSS)
- Secure authentication via Roblox OAuth
- No storage of message content
- Regular security reviews
However, no method of electronic transmission is 100% secure. We cannot guarantee absolute security.
7. Your Rights
Under the GDPR, you have the following rights:
- Access - Request a copy of your data
- Deletion - Request deletion of your account data ("Right to be Forgotten")
- Correction - Request correction of inaccurate data
- Restriction - Request that we limit the processing of your data
To exercise these rights, contact us at [email protected].
8. Cookies and Local Storage
The Roleplay Overlay application uses:
- Local Storage - To store your authentication token and preferences
- Session Cookies - For maintaining your login state on the web portal
These are "technical cookies" necessary for the Service to function. They are not used for advertising or tracking.
9. Children's Privacy
Roleplay Overlay is intended for users ages 18 and older. We do not knowingly collect information from children under this age.
10. International Users
The Service is operated from Spain. If you access the Service from outside Spain, please be aware that your information may be transferred to, stored, and processed in Spain, where data protection laws may differ from those of your country.
11. Third-Party Services
We use the following third-party services:
- Roblox OAuth - For authentication (governed by Roblox's privacy policy)
We are not responsible for the privacy practices of third-party services.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date.
13. Data Controller & Hosting Role
1. Data Controller (Legal Responsible):
This is a non-commercial, free service. The entity responsible for your data is:
AndalucĂa:RP
Titular: Ignacio
Location: Spain
Email: [email protected]
2. Technical Hosting Provider:
AraAraStudios provided the domain and server infrastructure solely as a data processor on behalf of the Data Controller. AraAraStudios does not access user data except for technical maintenance and security logging purposes.
Infrastructure Legal Contact:
For technical abuse reports or server takedowns strictly related to infrastructure:
[email protected]
14. Contact Us
If you have questions about this Privacy Policy, please contact us:
Email: [email protected]