Introduction
Tracksiderailway.co.uk ("we", "our", or "us") is committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy explains how we process data when you use Roblox authentication on our website.
Who is Responsible for Your Data
Roblox Corporation is the data controller for Roblox account information (for example, username, user ID, avatar, and account credentials). Tracksiderailway.co.uk is responsible only for processing the limited information necessary to run authentication on our site. Where Roblox acts as the controller for account data, Roblox determines the purposes and means of processing that data.
Information We Process
We do not directly collect or store your Roblox password or email address. When you authenticate using Roblox, we may temporarily receive the following information from Roblox:
- Roblox username
- Roblox user ID
- Roblox avatar image (if public)
- Roblox group rank or role (if applicable)
This information is used only to maintain your login session and provide you with access to our website features.
Purpose & Lawful Basis for Processing
We process data for the following purposes and lawful bases:
- Authentication: to verify identity using Roblox login. (Lawful basis: Legitimate interests).
We do not use your data for advertising, profiling, or analytics.
Data Storage & Retention
Roblox account information is handled by Roblox and is not stored on our servers. We only handle the limited data needed for the duration of your login session. Once your session ends, this information is no longer retained.
Cookies & Session Data
We do not use tracking or advertising cookies. The only cookie used by our website is a PHP session cookie which is required to maintain your authenticated session while you use the site. This session cookie is temporary and expires when you log out or close your browser.
Your Rights
Under the UK GDPR you have the following rights in relation to personal data we process:
- Right to access the personal data we hold about you.
- Right to request correction of inaccurate personal data.
- Right to request deletion of any personal data we temporarily process.
- Right to object to or restrict certain types of processing in limited circumstances.
Since we do not store Roblox account information ourselves, requests relating to Roblox account data should be directed to Roblox Corporation.
Third Parties & Sharing
We do not sell personal data. We do not share Roblox account credentials or passwords. We may disclose personal data if required by law or to protect our legal rights.
Security
We implement appropriate technical and organisational measures to protect personal data we process during authentication sessions. However, no system can be completely secure; if you suspect a data breach affecting your data, please contact us immediately.
Contact Us
If you have questions, wish to exercise your rights, or want to request deletion of any data we temporarily process, please contact us at:
support@tracksiderailway.co.uk
If you remain unsatisfied, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) in the UK.
Changes to This Policy
We may update this policy from time to time. When we do, we will update the Effective Date at the top of this document.