Privacy Policy

Last updated: July 24, 2026

This policy describes what data ProfitBlox ("we", "us") collects when you use the profitblox.org website and the ProfitBlox desktop application (the "bot"), and what we do with it. The short version: we collect the minimum needed to sell you a license and run your account, and your Roblox credentials never touch our servers.

What the bot never sends us

The ProfitBlox bot runs entirely on your own computer. Your Roblox credentials stay on your machine and are used locally to operate your account. We never receive, transmit, or store:

• your Roblox password;
• your Roblox session cookies (including .ROBLOSECURITY);
• your two-factor authentication (2FA) secrets — if you use the multi-account feature, the 2FA secret is stored locally on your device and login codes are generated locally;
• your trade history, inventory contents, or Roblox messages.

The bot contacts our servers only to validate that your license is active.

What we do collect

• Account data: the email address (and password hash, or Google sign-in identity) you register with on profitblox.org.
• Purchase data: when you buy a license we collect your email and the Roblox UserID you enter at checkout, so we can issue and manage your license.
• Payment data: card payments are processed by Stripe and crypto payments by our payment processor. We never see or store your card number. Stripe shares with us only what we need (e.g. your email, the product purchased, payment status). See Stripe's privacy policy.
• Referral data: if you arrive via a referral link we record the referral code so both sides receive their reward.
• Support data: if you contact us on Discord we see your Discord username and whatever you send us.

YouTube API Services

We operate a private, internal tool that uses YouTube API Services to upload our own original videos to our own YouTube channel, read that channel's analytics, and manage our own video metadata. It is not offered to customers or any third party, and it never accesses any other person's YouTube account or data.

• By using our services you also agree to the YouTube Terms of Service.
• Google's handling of data is described in the Google Privacy Policy.
• Access granted to our tool can be reviewed and revoked at any time from the Google security settings page.

What we store and for how long. The tool stores only our own channel's video IDs, titles, upload timestamps and publish status, in a local database on our own machine, so we can track which of our videos performed well. We do not store YouTube user data belonging to anyone else, and we do not share any YouTube data with third parties.

Deletion. Authorization tokens are deleted when access is revoked at the link above. Our stored records of our own uploads are deleted when they are no longer needed, and in any case within 30 days of the data being obtained from the YouTube API unless we refresh it. If you believe we hold YouTube data relating to you, contact us on Discord and we will delete it.

Cookies

We do not use advertising or cross-site tracking cookies, and we do not sell data to anyone. The website sets only what it needs to function:

• Session cookies that keep you signed in to your account dashboard;
• A referral cookie (pb_ref, 30 days) set only when you arrive through a referral link, so the referral can be credited at checkout.

How long we keep data

Account and purchase records are kept while your account exists and for as long as we need them for tax, accounting, and fraud-prevention purposes. You can ask us to delete your account data at any time (see below); we may retain records we are legally required to keep.

Who we share data with

Our service providers only, and only what each needs to do its job: Stripe (payments), Supabase (account authentication and database), Vercel (website hosting), and Discord (support and delivery). We do not sell or rent your data to anyone.

Your rights

You can request a copy of the data we hold about you, ask us to correct it, or ask us to delete it, by contacting us on Discord. Depending on where you live (e.g. the EU/UK under GDPR, or California under CCPA), these may be legal rights; we honor such requests regardless of where you live.

Children

ProfitBlox is not directed at children under 13, and you must be old enough to hold a payment method to purchase a license.

Changes

If we change this policy we will update this page and the date at the top. Continued use of the website or bot after a change means you accept the updated policy.

See also our Terms of Service.