Privacy Policy

Who we are

Talegates Interactive runs talegates.io and the Talegates account used by the Bloxma plugin for Roblox Studio. We operate from Dhaka, Bangladesh, and we are responsible for the personal data described here, except for payment data (see Payments below). Contact: email support@talegates.io or use the contact form and choose “Privacy or my data”.

What we collect, and why

We collect only what the service needs.

• Account: your email address, an optional display name, your password (stored only as a salted hash, never in readable form), and when you confirmed your email and accepted the Terms. Why: to create and secure your account.
• Roblox connection (only if you connect it): your numeric Roblox user ID and the date you connected. You verify on roblox.com; we never receive your Roblox password, cookies or session tokens, and we do not read your Roblox profile, friends or inventory. Why: to link your account to your Roblox identity. Disconnecting deletes it.
• Bloxma sessions: an identifier, when each session started and was last used, and hashed login tokens. Why: to keep Bloxma logged in and let you sign it out.
• Your plan: which Bloxma plan you have, where it came from, billing interval and dates. If you buy a paid plan, also the customer and subscription identifiers that Paddle gives us. We never see or store card numbers. Why: to give you the features you are entitled to.
• Security records: a keyed hash of your IP address (not the address) on security-relevant events such as lockouts and Bloxma logins, kept for 90 days, and a log of account events (for example “password changed”) that contains no email address.
• Messages you send us through the contact form are emailed to us and not stored on the website.

Payments

Payments are processed by Paddle.com, our Merchant of Record. Paddle collects the details you enter at checkout, such as your name, email address, billing country, tax details and card or wallet details. Paddle is responsible for that data under its own Privacy Notice, and gives us the information we need to provide your plan, such as identifiers, plan, status and dates. We never see or store your card details.

Cookies and tracking

We use one essential cookie to keep you logged in. We do not use advertising or analytics cookies, and we load fonts from our own server, not from a third party. When checkout is open, the payment window is provided by Paddle and may set its own cookies needed to process the payment and prevent fraud. If we add analytics or advertising cookies in future, we will update this page and ask for your consent first.

Who we share data with

We do not sell personal data. Our hosting provider, Hostinger, processes data on our behalf, including delivering the emails the website sends, such as verification emails and messages from the contact form. Paddle processes payments as described above. If you connect Roblox, you authenticate with Roblox under Roblox’s own terms and privacy policy. We may disclose data where the law requires it.

International transfers

We operate from Bangladesh, and our providers operate in several countries, so your data may be processed outside the country where you live. Where the law requires safeguards for such transfers, we use providers that apply recognised protections, such as standard contractual clauses.

How long we keep it

• Account data: until you delete your account.
• Accounts that never confirm their email: deleted after 7 days.
• Security records: 90 days.
• Bloxma sessions: until they expire (at most 90 days) or you sign them out; revoked sessions are purged after 7 days.
• Payment and subscription records: kept for as long as tax, accounting and consumer law require, without your name or email.

Our legal bases

Where the GDPR or a similar law applies, we process your data to perform our contract with you (your account and plan), for our legitimate interests in keeping the service secure, to meet legal obligations such as keeping payment records, and on the basis of your consent where we ask for it.

Your rights

In your account you can download your data, change your email and password, disconnect Roblox, sign Bloxma out and delete your account. You can also ask us for access to, correction of, or restriction of your data, or object to how we use it, by emailing support@talegates.io. You have the right to complain to your local data protection authority.

Children

Talegates is not for children under 13, and we do not knowingly collect their data. If you are under 18, you need a parent or guardian’s permission to buy a paid plan. Where your country sets a higher age for using online services, you must meet that age. If you believe a child has given us personal data, email us and we will delete it.

Security

Passwords are hashed; login tokens are random and stored hashed; connections use HTTPS; sensitive actions require re-entering your password; Bloxma sessions are revocable and expire.

Changes

We will update this page when our practices change and note the date here. Last updated: 22 October 2026.