Rumor Has It privacy policy

This policy covers Rumor Has It: Urban Legends (working title Mítoszgyár), a Roblox experience made by Kozma Works.

What Roblox handles

You play through your Roblox account. Roblox handles your account and login, age checks, friends, text chat and voice chat (where Roblox has enabled it for your account), moderation, and every Robux purchase and payment. We never see your password, email address, real name, payment details or your chat messages. Roblox’s privacy policy: roblox.com/info/privacy.

What the game itself saves

The game saves one profile per player in Roblox’s data storage, linked to your Roblox user ID:

your case points, and any Style Tokens and Gear Tokens you have not used yet;
the hats and kits you own and which ones you wear or carry;
how many cases you played and sealed, nights on the riverside, rescues, and the date of your last daily first seal;
the IDs of your Robux purchases, so that a purchase is never granted twice;
your settings: language, music and effects volume, reduced flashing and high contrast.

We store nothing else about you: no chat logs and no name. Everything on this list is personal data, because it is linked to your Roblox user ID.

Legal basis: performing our agreement with you, the game’s terms of use (Article 6(1)(b) GDPR).

We keep the profile until [X] after you last played [TODO: owner decides], or until you ask us to delete it, including when Roblox forwards a deletion request on your behalf. Roblox’s storage may keep earlier versions for a limited time before they disappear.

Play statistics

We use Roblox’s built-in analytics to see where new players get stuck and how cases go: the steps of the first visit (joining, getting ready, the first case, the first clue), the stages of a case (arrival, the first clue, the broadcast, the first device part, powering the device, sealing), and how a case ended, with the rules the crew chose and the night’s variant. We also count how often players are caught, revived, or trip the power grid. We look at these in aggregate in Roblox’s Creator Dashboard.

Legal basis: our legitimate interest in making the game understandable and fair.

Purchases

Two kinds of tokens can be bought with Robux: a Style Token unlocks a hat, a Gear Token unlocks a kit. Every hat and kit can also be earned with case points. Private servers can be bought through Roblox, which charges them as a recurring payment until you cancel. Roblox processes every purchase.

Nothing outside Roblox

The game sends no data to any service outside Roblox. Roblox Corporation is based in the USA, so everything described here is stored and processed outside the European Union as well. Roblox’s privacy policy describes the safeguards it uses.

Who is responsible for your data

The maker of this game and the controller of the personal data the game itself processes is Árpád Kozma, sole proprietor (egyéni vállalkozó), trading as Kozma Works; registered address: Szabadság tér 6., 2337 Délegyháza, Hungary; registering authority: Ministry of the Interior of Hungary (register of sole proprietors); registration number: 62570660; EU VAT ID: HU92217287; e-mail: [email protected]. In privacy matters, write “Privacy” in the subject line.

Platforms and services we work with (Google, Roblox and others named above) are responsible for the data they collect themselves, under their own privacy policies.

Your rights

Under the GDPR you can ask for a copy of the personal data we hold about you, ask us to correct or delete it, ask us to restrict its use, ask for it in a portable format where the law provides for that (Article 20 GDPR), and object to processing based on our legitimate interest. Where we rely on your consent, you can withdraw it at any time; this does not affect what happened before. For data that a platform holds, use that platform’s own tools as well (they are linked above). We answer within one month. To find your data, we may ask for your player name or user ID, but never for a password.

If you think we handle your data unlawfully, you can complain to the Hungarian data protection authority, Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), Falk Miksa utca 9–11, 1055 Budapest, naih.hu, or to the authority where you live. You can also go to court: in Hungary, the regional court (törvényszék) has jurisdiction, and you can choose the one of your home address.

Children

We design our games to be fair and safe for their audience, and we follow the age rules of the platform the game runs on. Children can play our Roblox games. We treat their data the same way as everyone else’s: we handle only what this policy lists, linked to their Roblox user ID, and we never ask for a child’s name or contact details. For Glowbug Swap, see “Age” above. A parent can ask us at any time what we hold about their child and can ask us to delete it.