Effective Date: February 10, 2026

BloxWorks, LLC d/b/a Bloxlink (“Bloxlink,” “we,” “us,” “our”) owns and operates Bloxlink – a service that allows Discord users to verify and display that they are the user who owns a particular Roblox account – and our website (www.blox.link) (collectively, the “Services”). This privacy notice (“Notice”) describes what personal information we collect, how we use and protect it, and what privacy rights you have.

Please note that if you give your information to another business (like Discord), it is that business’s privacy notice rather than this Notice that applies to the processing of your information.

What Information We Collect

Information You Provide to Us

• Your Account: When you create an account with Bloxlink, we collect profile information from Roblox and Discord accounts you choose to link, such as your username, display name, and avatar picture.
• User Content: We collect the information you provide to us, for example when you upload an image to your account or contact us.

Information We Collect When You Use the Services

• Subscription Information: We collect information related to your subscription if you choose to purchase a subscription.
• Usage Information: We collect information about your use of and interaction with the Services.
• Technical and Device Information: We collect technical and device information when you access the Services, such as IP address.
• Cookies: We collect and use information through the use of cookies and similar technologies to improve functionality, for authentication (session management), for analytics, and to generally improve your experience and our Services. If you would prefer not to accept cookies, you can change the setup of your browser to reject all or some cookies. Note that if you reject certain cookies, you may not be able to use all features of our services.

Information We Collect from Other Sources

• Payment Processors: We collect information about financial transactions when you purchase a subscription to Bloxlink.
• Other Parties: We collect information from Roblox when you connect your Roblox account, and information from Discord when you connect your Discord account, such as your display name, community role, and server permissions and memberships.

How We Use Your Information

We process your information for the following purposes:

• Providing our Services, including associating your Roblox ID and Discord ID and user accounts;
• Collecting and storing user IDs and usernames to provide verification and role-syncing services;
• Communicating with you and responding to your requests or questions;
• Improving our services;
• Maintaining the integrity and security of our website and services;
• Performing website traffic optimization and website analytics; and
• Fulfilling legal obligations and enforcing our rights.

How We Share Your Information

The table below describes the categories of information we have disclosed to which categories of third parties for business purposes in the last twelve months.

Category	Categories of Third Parties Receiving Information
Identifiers, including your Roblox display name	Service providers, including for infrastructure, payment processing, and analytics Discord and Discord users when you connect and use Bloxlink within Discord to share or verify your Roblox display name
Commercial information, including your subscription status and history	Service providers, including for infrastructure, payment processing, and analytics
Internet or other electronic network activity information, including related to your use of the Services	Service providers, including for infrastructure, payment processing, and analytics
Information related to your Discord account, such as community role, server owner username, profile picture, and server name	Service providers, including for infrastructure, payment processing, and analytics Discord and Discord users when you connect and use Bloxlink within Discord

We may also disclose your information:

• To the extent required by law, or if we have a good-faith belief that we need to disclose it in order to comply with official investigations or legal proceedings. If we have to disclose your information to governmental / law enforcement officials, we may not be able to ensure that those officials will maintain the privacy and security of your information.
• If we sell or transfer all or some of our company’s business interests, assets, or both, or in connection with a corporate restructuring.

Your Privacy Rights

Below are privacy rights that may be available to you under applicable laws depending on where you live, including the European Economic Area (“EEA”), United Kingdom (“UK”), and US states such as California, Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, and Virginia.

• Access and Portability: You may have the right to know, and request access to, the personal information we collect, use, share, or otherwise process about you.

• Rectify or Correct: You may have the right to correct inaccurate information. You may correct, amend, or update Bloxlink profile information or account information at any time by adjusting that information in your account settings.

• Delete: You may have the right to delete personal information. Once deleted, we cannot reinstate your data, including your account. We do not have control over content you have shared directly or publicly with others or that others may have copied.

• Revoke Consent: To the extent we rely on your consent to engage in processing, you have the right to withdraw that consent at any time. Please note that the withdrawal of your consent will not affect processing done previously based on that consent.

• Object or Restrict Processing: You may have the right to object to, and seek restriction of, our processing of your personal information based on our legitimate interests. In such cases, we will cease processing your information unless we have compelling legitimate grounds to continue processing or where necessary for legal reasons.

• Opt Out of Selling or Sharing for Targeted Advertising: We do not “sell” or “share” your information for targeted advertising. We therefore do not process opt-out preference signals like the Global Privacy Control. Note that Do Not Track (DNT) is a privacy preference you can set in browsers, but we do not currently process DNT signals.

• Automated Decision-Making: We do not use automated decision-making technologies for decisions that have legal or similarly significant effects on you.

• Limit Use of Sensitive Personal Information: We do not use or disclose sensitive personal information for purposes other than with your consent to provide the Services, or as otherwise permitted by law.

• Appeal or Complaint to Supervisory Authority: You may have the right to appeal our decision regarding a request related to your privacy rights or to complain to your local data protection supervisory authority.

To exercise any of the rights described above, please contact us using the information listed in the “Contact Us” section below. To respond to some requests, we may need to ask you to verify your identity by providing information about yourself or your account. You may also appoint an authorized agent to exercise any of your privacy rights on your behalf. To verify that your authorized agent acts on your behalf, we will ask for proof from your agent and may require that you also verify your identity. Please note that these rights may be subject to potential limitations and exceptions. We will not discriminate against you for exercising any of your privacy rights.

Lawful Bases for Processing

We generally process your information under our terms and agreement to provide our Services to you. In addition, we may process your information based on the following lawful grounds:

• Your consent;
• Legitimate interests, such as our interest in operating, evaluating, managing, and improving our business (including enhancing and improving our Services and making them more useful and user-friendly; and protecting our Services and users from security threats, fraud, and abuse);
• Complying with the law; and
• Other grounds as required or permitted by law.

How Long We Keep Your Information

We retain your information for as long as needed for the purpose we collected it and any other permitted linked purpose and in accordance with data retention policies. Our retention periods align with our business needs and industry standards.

Privacy of Children

Bloxlink is not directed at, or intended for use by, children under the age of 13 and we do not knowingly collect personal information from children under the age of 13. If you are under 13 years of age, do not use our services. If you believe a child under 13 years of age provided personal information to us, please contact us using the Contact Us information below.

Data Integrity & Security

We are committed to keeping your information safe. We have implemented and will maintain technical, administrative, and physical measures that are reasonably designed to help safeguard your information. Although Bloxlink uses reasonable efforts to secure our systems, no method is foolproof and we cannot guarantee that the information will be completely secure.

International Transfers of Your Information

We are a company based and headquartered in the United States. Our service providers and other third parties with whom we share your information may operate globally. When your information is safeguarded by the EU or UK General Data Protection Regulation, or Swiss data protection law, before sending it to parties outside the EEA, the UK, or Switzerland, we will either (1) seek your consent, or (2) ensure the third party maintains the same level of privacy and security for your information as we do.

We are accountable for the protection of your information when we transfer it to others. We either send it to a country, territory or sector within a country that is recognized as providing the same level of protection as the country of origin, or use safeguards like Binding Corporate Rules or the Standard Contractual Clauses approved by the European Commission (with necessary adjustments for transfers from the UK or Switzerland), or use specific transfer instruments like the UK International Data Transfer Agreement.

Changes to this Notice

We may update this Notice at our discretion. When we update the Notice, we will post the updated Notice with a revised effective date, and we will provide you with notice of any material changes.

Contact Us

If you have any questions about this Notice or our processing of your information, or want to submit a consumer request, please email us at [email protected] or by postal mail at:

Controller: BloxWorks, LLC
Address: 3150 South Delaware Street, San Mateo, CA 94403