Privacy Policy

What we collect

When you sign in through Roblox OAuth we receive and store the following information from your Roblox account:

• Your Roblox user ID
• Your Roblox username and display name
• Your Roblox avatar thumbnail URL

We do not receive or store your Roblox password. Authentication is handled entirely through Roblox's official OAuth system.

If you choose to link Discord, we store your Discord user ID, display name and the date you linked it. We use this only to match GurtBot commands to your Gunterverse account. We request only basic identity access and do not store the Discord access token.

Information you provide

When you use Gunterverse you may choose to provide:

• A bio on your profile (up to 500 characters)
• Ratings and written reviews for events and games
• Lists of events and games
• Comments on reviews and lists
• Favorite selections on your profile
• Messages you send to other members

All user-generated content is stored in our database and displayed publicly unless you mark a list as private or unlisted. Messages are the exception: they are never public, and are covered in their own section below.

Public sharing and shortlinks

Public profiles, reviews, lists and other public pages can be shared through gunt.it. Share images may include the page's artwork, the reviewer's name and rating, and a short review excerpt. Spoiler-marked review text and badge pictures are hidden in these previews. A saved tier ranking records its author, source list and arrangement. It is publicly viewable while its source list remains public.

We record daily counts for link visits, preview requests, copy and share buttons, and image downloads. Administrators can see these totals and the account that first created a shortlink. These counts do not tell us whether a post was published or how many people saw it on another service.

To estimate daily unique visits, we use a keyed hash of the link, date, IP address and browser identification string. The hash expires after 48 hours. Raw IP addresses, browser identification strings and full referrer URLs are not stored in sharing statistics. Aggregate daily totals are retained. Known preview crawlers are counted separately from visits.

Messages

When you send a message we store what you wrote, who it went to and when. A message is written once per recipient, so each person's copy holds only the text meant for them and does not name anybody else it was sent to.

Who can read a message:

• The person it was sent to, and the person who sent it.
• Our moderators, if somebody reports it. A report shares that one message and nothing else from either inbox.
• Nobody else. Messages are not public, are not in the API, are not shown to search engines and are not shared with any third party.

Messages are not used to advertise to you and are not sold to anyone. We do not read inboxes to build a profile of you.

Notifications about a message never contain the message. Site alerts, emails and push notifications say only that you received a message. They do not show its text on a lock screen.

When staff send a message from the official Gunterverse account, we record which staff member sent it. That record is kept for accountability and is never shown to the person who received the message.

Deleting a message removes your copy from view. The other person keeps theirs. A message removed by a moderator is hidden rather than erased, so the report it came from can still be reviewed.

You choose who is able to message you in Settings. New accounts start on friends only, meaning people you follow who follow you back. Gunterverse staff and the official Gunterverse account can still write to you whatever you choose, because account warnings, moderation decisions and answers to reports have to be able to reach you.

Messages are kept for as long as your account exists. Deleting your account deletes them, both the ones you received and the ones you sent, including the copies sitting in other people's inboxes.

How we use your information

We use the information we collect to:

• Provide and maintain the Gunterverse platform
• Display your profile and activity to other users
• Calculate aggregate statistics such as average ratings
• Enable social features like following and activity feeds
• Moderate content and enforce our terms of service

We do not sell your personal information to third parties.

Cookies and sessions

We use a session cookie to keep you signed in. This cookie is essential for the platform to function and is not used for tracking or advertising. The session expires after 7 days of inactivity.

Third-party services

We use the following third-party services:

• Roblox OAuth - For user authentication. Subject to Roblox Terms of Use.
• Discord OAuth - When you choose to link Discord for GurtBot Clan Battle commands. Subject to Discord's Privacy Policy.
• Stripe - For processing Supporter card payments and subscriptions. Subject to Stripe's Privacy Policy.
• MongoDB Atlas - For data storage.
• Google AdSense and Privacy & messaging - For advertising, consent choices and ad-blocking recovery on eligible public pages. Google and its advertising partners may use cookies, device information and your IP address to deliver and measure advertising, subject to applicable consent choices. Read Google's advertising information and Privacy Policy. Where available, use the Privacy and cookie settings link in the footer to change your choices. Active Supporter accounts and accounts with permanent ad-free access do not load these advertising services.
• Google Translate - When a user selects Translate, the public review, bio or comment they selected opens in Google Translate. Private messages and moderation records are never included. Subject to Google's Privacy Policy.

The API and your data

Gunterverse offers a read-only API to Supporters and to the paid developer tier. It exposes the same things your profile already shows publicly on the site: your username, display name, avatar, bio, Roblox id, review and event counts, follower counts, reviews and public lists.

The developer tier can additionally read which badges, items and event completions an account holds. This is the same information shown on your profile and on badge and item pages; the API makes it easier to read in bulk, not more revealing.

The API never exposes your email or payment details, OAuth tokens, notification preferences, blocked list, private or unlisted lists or removed reviews. Suspended accounts do not appear at all. Blocks are honoured: someone you have blocked cannot read your profile or content through the API any more than they can on the site.

If you would rather your public activity was not readable this way, the same options apply as on the site: make a list private, or delete the content.

Gunterverse for Roblox extension

The Gunterverse for Roblox extension shows badges, event items and game progress on supported Roblox pages. Free previews work without connecting an account. If you connect for Supporter tools, it uses your Roblox account ID to connect your browser to Gunterverse and verify your access. It handles your username, display name, avatar, membership status and extension display preferences for this purpose.

Connecting your browser

Connecting your browser requires a one-time pairing code. Codes expire after ten minutes and can only be used once. Your browser creates a signing key pair. The private key is stored in the extension's IndexedDB storage and is not sent to Gunterverse. We store the public key, its fingerprint, a browser identifier and the account linked to that browser so we can verify requests. We also store the browser's connection and revocation details, last access time and last request IP address. IP addresses are also used to limit abusive requests.

Badge and item records and page activity

The extension reads relevant details from the supported page you are using. It requests matching profiles, games, items, badges and event rewards from Roblox or Gunterverse. It handles ownership records, acquisition dates, progress, achievements, ratings and images to display badges, items and game progress. Searches and comparison requests are sent to the service needed to return results. Friend, follower and following IDs are retrieved from Roblox for connection filters and processed in the extension. They are not uploaded to Gunterverse by that filter feature.

These requests can reveal which supported records you view or search for. The extension does not access Chrome's full browsing history, collect unrelated browsing activity or read private messages. It does not include an advertising analytics SDK or track general mouse movements, scrolling or keystrokes.

Supporter purchases

If you start a Supporter purchase through the extension, it passes your selected plan, payment method and Roblox account ID to Gunterverse to prepare the checkout. It handles temporary checkout and security tokens and checks your membership status afterwards. Card payment details are entered with Stripe. Robux payments take place through Roblox. The extension does not read card numbers, bank details or Roblox passwords. Roblox session cookie values are not copied to Gunterverse.

Display preferences, limited counts of useful extension clicks, active dates, upgrade attempts and reminder dismissal choices are kept in local extension storage. They help avoid repeated upgrade offers and control optional donation reminders. These engagement counters are not uploaded to Gunterverse. Donation reminders can be dismissed, snoozed or turned off; a donation does not grant Supporter access.

Services that process extension data

Data needed for Roblox features is sent to Roblox. Gunterverse's hosting, database and request-limiting providers process the records needed to operate the service. Stripe handles card checkout when you choose that payment method. The Third-party services section of this policy describes the other services used by the Gunterverse website.

Storage and deletion

Browser keys and cached account details are stored locally by the extension. Disconnecting revokes the linked browser's access but does not erase every local or server record. You can remove the extension's local data by clearing its storage or removing the extension. Device records and account preferences have no automatic expiry in the current implementation. For account deletion or a request to remove associated extension records, contact hi@vams.dev. Temporary pairing records and request nonces have expiry controls. Revoking a browser prevents it from making further authenticated requests.

Limited Use

Gunterverse's use and transfer of data received through the extension complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. We use this data only to provide the badge, item and progress features described here and their related account, payment and security operations. We do not sell extension user data, use it for personalised advertising or use it to assess creditworthiness or provide lending services. Any transfer must be permitted by the Chrome Web Store User Data Policy.

Questions about the extension or your data can be sent to hi@vams.dev.

Data retention

Your account data is retained as long as your account exists. If you want your data deleted you can contact us and we will remove your account and associated data within a reasonable timeframe.

Children's privacy

Gunterverse is intended for users who have a Roblox account. We do not knowingly collect personal information from children under the age of 13 beyond what is provided through Roblox OAuth. If you believe a child under 13 has provided us with personal information please contact us so we can take appropriate action.

Your rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and data
• Export your reviews and lists

Changes to this policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date.

Contact

If you have questions about this privacy policy or your data, email hi@vams.dev or reach out through our community channels.