Last updated 2026.
An email address and username, a hashed password, the Roblox place IDs you submit, your order and coin history, and basic request metadata such as IP address and browser user agent used for rate limiting and abuse prevention.
We do not collect or store Roblox credentials, because we never ask for them. We do not take card payments at all, so there are no card numbers to store. Crypto payments record only the amount, a reference code and the time, never a wallet address belonging to you.
Passwords are hashed with bcrypt and are never stored or logged in readable form. Session tokens are stored hashed as well, so a copy of our database does not hand over live sessions.
Purely to rate limit sign-ups, logins and reward claims. It is the only practical defence against someone farming the watch-to-earn system with scripted accounts.
We do not sell your data. We query the public Roblox API to resolve the place IDs you give us, which tells Roblox nothing about you. If card payment is enabled, your email is shared with the payment processor to issue a receipt.
Account data is kept while the account exists. Ask us in Discord from the account you signed up with to have your account and personal data deleted. Financial records may be retained where we are legally required to keep them.
We set a session cookie to keep you signed in, a CSRF cookie to protect forms, and a short-lived cookie to carry one-off status messages between pages. There is no third party advertising or analytics tracking.
GrowYourCCU