AvatarFlex Privacy Policy

1. Information We Collect

When a username is searched, we fetch publicly available information from Roblox's public APIs, such as:

• Roblox username and display name
• Avatar image and thumbnail
• Account join date, badge counts, friends and follower counts, and public inventory stats
• Publicly visible Roblox and game badges

This is data Roblox already makes public to anyone. We do not access, request, or store private Roblox account data, passwords, or login credentials. We never ask you to log in to Roblox.

AvatarFlex has no user accounts and does not require a login. To run features like battle voting, rewards, and Flex Coins without an account, we generate a random anonymous identifier ("anon_id") that is stored in your browser (in a cookie and in local storage). It is not linked to your real name, email, or Roblox login, and we do not use it to identify you personally.

Like most websites, we and our analytics providers automatically receive certain technical information, including IP address, browser type, device type, pages visited, referring site, and general interaction data. We use this to run the Site, measure engagement, and prevent abuse such as vote spamming.

If you create a Flex Card or take part in battles, we may store the generated card image in our cloud backend (Supabase) and display it on public areas of the Site (such as the leaderboard, battles, or recent activity). Generated images are tied to a Roblox username, not to your real identity.

If you use our contact form, we collect the name, email address, and message you provide so we can respond. Form submissions are processed by a third party service (FormSubmit) and delivered to us by email.

2. Cookies, Analytics, and Consent

We use cookies and similar technologies (including browser local storage) to:

• Remember your anonymous identifier and card settings
• Cache data to improve page speed
• Measure traffic and usage through Google Analytics
• Support advertising, as described in Section 3

We use Google Analytics to understand how the Site is used. Google Analytics sets its own cookies. You can opt out using the Google Analytics Opt-out Browser Add-on.

Where required (for example, for visitors in the European Economic Area and the UK), we present a consent banner and use Google Consent Mode to manage advertising and analytics cookies based on your choice. You can change or withdraw your consent at any time through that banner, or by adjusting your browser cookie settings. Blocking cookies may cause some features to stop working.

3. Advertising (Google AdSense)

AvatarFlex is free and may be supported by advertising, including Google AdSense.

• Third party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites.
• Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to our Site and other sites on the internet.
• You can opt out of personalized advertising by visiting Google Ads Settings, or opt out of some third party vendors' use of cookies at aboutads.info.
• For visitors where consent is required, ad personalization is controlled by the consent banner described in Section 2.

We do not control the cookies set by advertising partners. For more information on how Google uses data, see How Google uses information from sites that use its services.

4. How We Use Information

• Generate and display Flex Cards from public Roblox data
• Power features like battles, votes, rewards, and the leaderboard
• Create shareable preview images for social media
• Measure engagement, maintain and improve the Site, and prevent abuse
• Respond to your messages and removal requests
• Show advertising to keep the Site free

5. How We Share Information

We do not sell your personal information. We share information only with service providers that help us operate the Site, and where required by law. These providers include:

• Google (Analytics and AdSense advertising)
• Supabase (database and image storage)
• Vercel (website hosting and content delivery)
• FormSubmit (processing contact form messages)
• Roblox public APIs (source of the public profile data we display)

These providers process data under their own privacy policies. Public Flex Cards and shared links may also be viewed by anyone you or others share them with.

6. Public Profiles and Your Control

AvatarFlex displays public Roblox profile data, similar to viewing a public Roblox profile directly. You can ask us to remove a Roblox username from the Site.

• Contact us and we will block that username so it no longer loads on the Site or appears in battles, the leaderboard, cards, or recent activity.
• On request, we will also delete stored data associated with that username.

Please note that because the underlying data is public on Roblox, we cannot prevent the profile from existing on Roblox itself. Our removal applies to AvatarFlex.

7. Children's Privacy

AvatarFlex is intended for a general audience and is not directed at children under 13 for the purpose of collecting personal information. We do not require an account, and we do not knowingly collect personal information (such as real name, email, or address) from children under 13.

The profile data we display comes only from Roblox's public APIs. We take steps intended to comply with the Children's Online Privacy Protection Act (COPPA) and Google's policies for advertising, including limiting ad personalization where required.

If you are a parent or guardian and believe your child has provided us with personal information, or you want your child's public Roblox username removed from the Site, please contact us and we will act promptly.

8. Your Privacy Rights

Depending on where you live, you may have rights over your personal information:

• EEA and UK (GDPR): the right to access, correct, delete, restrict, or object to processing of your personal data, and to withdraw consent.
• California (CCPA/CPRA): the right to know what personal information we collect, to request deletion, and to opt out of the "sale" or "sharing" of personal information. We do not sell personal information.

To exercise any of these rights, contact us. We will respond as required by applicable law.

9. Data Retention

We keep cached public Roblox data and generated cards only as long as needed to run the Site, and we refresh or clear cached data periodically. Contact messages are kept as long as needed to handle your request. When you ask us to remove a username, we block it and delete associated stored data.

10. Security

AvatarFlex is a read only tool. We do not require logins or passwords, and we do not collect payment information. We take reasonable measures to protect the data we store, but no method of transmission or storage is completely secure, so we cannot guarantee absolute security.

11. International Users

The Site is operated and its data is processed in the United States and other countries where our providers operate. If you access the Site from outside these locations, you understand your information may be transferred to and processed in countries with different data protection laws than your own.

12. Changes to This Policy

We may update this Privacy Policy as the Site evolves. We will update the "Last updated" date above and reflect material changes on this page. Continued use of the Site after changes means you accept the updated Policy.

13. Contact Us

For any privacy question, request, or removal, reach us through the contact form on our website. We respond to all privacy related requests.