What we store
- Identity. Your Roblox user ID, username, display name, avatar URL and account creation date; your email address; your public RoAuction username.
- Activity. Listings, bids, watchlists, questions, orders and reviews.
- Technical. IP address and user agent on sessions, bids, delivery-confirmations and downloads. These are fraud and dispute evidence, not analytics.
- Files. What sellers upload, and a SHA-256 hash of each file.
- Secrets, encrypted. Roblox refresh tokens and 2FA secrets are encrypted at rest with AES-GCM. Session tokens are stored only as a SHA-256 hash.
What we never have
Your Roblox password. Your .ROBLOSECURITY cookie. Your card number, bank details, or tax information. The last three live with Stripe; the first two we would refuse if offered.
Roblox data
We request the narrowest scopes that do the job. Signing in uses openid and profile only. Universe and group scopes are requested separately, and only when a seller attaches verified game or group data to a listing.
We then store a timestamped snapshot of the fields returned, so the listing can show what was verified and when. Revoke our access from your Roblox settings at any time; the snapshot stops updating and the listing says so.
What is public
Your public profile at /u/username shows:
- Your Roblox username, display name and avatar
- Your Roblox account age and RoAuction join year
- Trust tier, completed sales, rating and reviews
- Your active listings
Never public: your email, your IP addresses, your real name, your location, your payment methods, your bid maximums, or which bids are yours. Bid history is anonymised consistently, so the same person is always "Bidder 4" on that listing. We keep the real identities server-side; that is what makes shill bidding detectable.
Who else sees it
- Stripe for payments, payouts and seller identity verification.
- Neon / Supabase for the database.
- AWS S3 and CloudFront for file storage and delivery.
- Resend for transactional email.
- Upstash for rate limiting and live counters.
- Cloudflare for hosting and edge delivery.
We do not sell personal data, and we do not run third-party advertising or tracking scripts.
How long we keep it
- Account data: while your account exists.
- Orders, delivery logs and the audit log: seven years. These are financial records and chargeback evidence; we cannot delete them on request.
- Sessions: 30 days rolling, then expired.
- OAuth state: 10 minutes, then deleted.
- Uploaded files: while the listing exists, and for the duration of any buyer's download rights.
Your rights
You can request a copy of your data, correct it, or ask us to delete your account. Deletion removes your profile, listings and personal details; it does not remove completed financial records, which we are required to keep.
Email secretugcofficial@gmail.com from the address on the account. We respond within 30 days.
Younger users
Roblox has a young user base and we take that seriously. RoAuction is for developers and is not directed at children. If you are under the age of digital consent where you live, do not create an account without a parent or guardian. If we learn an account belongs to a child who cannot consent, we close it and delete the personal data on it.
We also encourage ACH over cards above $200, partly because it carries enough friction that a child cannot casually complete it on a parent's account.