Privacy Policy
Effective 28 September 2026
Who we are¶
nanoblox makes open tools for Roblox developers: HD Admin, TopbarPlus and ZonePlus. For anything privacy related, email ben@nanoblox.com and we'll get back to you.
What we collect¶
Emails. Adding an email on your Account page needs a Roblox sign-in, and we store the address you give us against that account along with the page you added it from. What we send is up to the switches on that page: waitlist launches, news and updates, replies and mentions on your forum posts, and a monthly summary of activity on them. We check that an address can receive mail when you type it, and when a message bounces or is reported as spam we stop sending to that address. Emails are sent through Resend, which keeps a record of each delivery for a short time. Every email includes a one-click way to opt out or to remove an address that isn't yours, you can change your email or any switch any time by signing back in, and your address isn't shared or sold.
Accounts. If you sign in to the dashboard with Roblox, we store your Roblox user ID, username, display name and avatar so we can show who you are and which games you manage. Signing in never gives us your Roblox password. If you create an account with an email address instead, we store that email.
Game registrations. Games running HD Admin can register their experience ID with our charts service. An experience ID identifies a game, not a person.
Game stats. Games linked to the dashboard send us aggregate stats such as player counts, visits, command usage and the Robux earned through HD Admin. These describe a game, not a person. We use them to run the dashboard for you, and in combined, anonymised form (totals and averages across many games) to improve our tools and share overall statistics, like how much revenue HD Admin generates across all games. We never publish numbers about an individual game without its owner's permission.
Forum posts. If you post on the forum, we store what you write, the images and videos you attach, votes and reactions, and the Roblox username and avatar shown next to them. Posts are public. Attachments are checked automatically before anyone else sees them, which means each image, or a few still frames of each video, is sent to an AI service (Claude, by Anthropic) for that check. It isn't used to train the service. If something you post is refused, we keep a note of that against your account for a week so repeated problems add up.
Discord. Our Discord server is bridged to the forum. If you start a thread in one of the server's forum channels, or post in its announcements channel, our bot reads that message and stores its text as a post on the forum under your name, and syncs votes and reactions between the two. Only those channels are read, never general chat or direct messages. If you connect your Discord account on your forum profile, we store your Discord user ID so posts and votes you make on the server count as you, and so the server can mark you as verified. Disconnecting removes the ID and the verified mark.
Standard server logs. Like nearly every website, our infrastructure briefly records request data (such as IP addresses) to keep things running and fend off abuse. These logs are transient and not used to profile anyone.
Where your data lives¶
Our database runs on a server in the EU (Hetzner, Germany). Traffic passes through Cloudflare, and our websites are served by Vercel. Images and videos attached on the forum are stored and served by Cloudflare, which keeps copies around the world so they load quickly. Emails go out through Resend, from servers in the EU. We don't use advertising or cross-site tracking, and we don't sell data to anyone.
How long we keep things¶
Emails are kept while we send updates, or until you unsubscribe or ask us to remove yours. Forum posts stay up until you delete them or we remove them. When we take a post or comment out of sight, it stays hidden for 30 days and is then deleted for good, along with anything attached to it, so a wrong call can be undone and nothing lingers. Videos on posts that have been resolved may be removed after a couple of months to save space, the post itself stays. Server logs rotate away on their own.
Your rights¶
You can ask what we hold about you, ask us to correct it, or ask us to delete it. Email ben@nanoblox.com and we'll sort it within 30 days. If you're in the UK or EU you also have the right to complain to your data protection authority, though we'd appreciate the chance to fix things first.
Children¶
Our websites, the waitlist and the forum are aimed at game developers and aren't directed at children under 13. Please don't submit your email or post on the forum if you're under 13.
Business transfers¶
We don't sell your data, and we never will. Separately from that, if nanoblox itself is ever acquired by or merged into another company, the data our services run on may transfer to the new owner as part of that deal. If that happens, this policy continues to apply, and we'll tell you before anything about how your data is handled changes.
Changes¶
If this policy changes in a way that matters, we'll update the date at the top and, where it affects something you've signed up for, tell you directly.
