Privacy Policy

Effective Date: September 2026

Kallskär RBLX ("we", "us", or "our") respects your privacy and is committed to protecting the personal data of our players and community members. This Privacy Policy explains how we collect, use, and safeguard your data when you interact with the Kallskär SFR-1000 simulator, our external web hubs, and associated Roblox OAuth applications.

Please note: The in-game entity "Kallskär Kraftgrupp AB" (KKG) is a purely fictional, alternate-history corporation created for roleplay purposes. This policy governs the real-world data handling of the Kallskär RBLX development group.

1. Information We Collect

When you authenticate via Roblox OAuth 2.0, connect to our simulation servers, or interact with our web hubs, we may collect the following information:

• Roblox Account Data: Your Roblox User ID, Username, Display Name, and Group Role status. (Note: We do not collect your real name, email address, or password; this data is provided directly by Roblox Corporation via their API).
• Telemetry & Gameplay Data: Actions taken at control panels, shift durations, reactor trips initiated, private server IDs, and general facility interactions.
• Web & Diagnostic Data: Basic diagnostic data, error logs, and IP addresses required to ensure the stability and security of the Operations Hub and OAuth authentication.

2. How We Use Your Data

Your data is utilized strictly for operational, technical, and moderation purposes:

• To verify your clearance level for specific control room desks and administrative web panels.
• To persist plant conditions (e.g., thermal fatigue, cycle day, and burnup) across private server sessions via Roblox DataStores.
• To maintain accountability via the sequence-of-events log, ensuring malicious actions (griefing) can be tracked and moderated.
• To secure our web infrastructure against unauthorized access and API abuse.

3. Lawful Basis for Processing (UK GDPR)

Under the UK General Data Protection Regulation (UK GDPR), we process your personal data under the following lawful bases:

• Legitimate Interests: To operate the game, maintain server integrity, prevent griefing, and enforce our Terms of Service.
• Contractual Necessity: To provide the persistent multiplayer services and web-hub features you request.

4. Children's Privacy

Our services are hosted on the Roblox platform, which has its own age-gating and privacy protections. We do not knowingly collect personal, identifiable information (such as real names or email addresses) from children under the age of 13 (or 16 in applicable EU jurisdictions). If we become aware that we have inadvertently collected such data via our external web hubs, we will delete it promptly.

5. Data Retention

We retain your gameplay telemetry and moderation logs only for as long as necessary to fulfill the purposes outlined in this policy. Sequence-of-events logs and web authentication logs are automatically purged or anonymized after 90 days, unless retained longer due to an active moderation investigation or ban appeal.

6. Third-Party Sharing & International Transfers

We do not sell, trade, or rent your personal data to external third parties. Data is only shared with Roblox Corporation infrastructure as required to maintain server connectivity and Datastore persistence. If our web servers are hosted outside the UK/EEA, we ensure that appropriate safeguards (such as Standard Contractual Clauses) are in place to protect your data.

7. Your Rights (UK GDPR)

We process your data transparently and securely. Under the UK GDPR, you have specific rights regarding your personal information, including:

• Right to Access: You may request a copy of the telemetry and moderation data we hold associated with your Roblox ID.
• Right to Erasure (Article 17): You may submit a formal request to have your web-hub telemetry, moderation history, and identifying data permanently wiped from our databases. (Note: We cannot delete data stored directly inside Roblox's proprietary DataStores; you must contact Roblox Support for platform-level data erasure).

8. Contact Us

For data inquiries, Article 17 erasure requests, or clearance issues, please contact our Data Protection team at privacy.kallskarrblx@gmail.com or open a ticket with the Shift Supervisor team in our official community Discord.