Privacy Policy

Who we are

BadPals LTD, based in Cyprus, operates this website and is the controller responsible for the personal information described here. References to "we", "our" and "us" mean BadPals LTD. For privacy questions or requests, email hello@badpals.com.

This policy covers this website and messages sent through it. Roblox's platform and other websites linked from this site have their own privacy policies.

Information collected

If you use our contact form, we collect:

• Your email address, selected topic and message.
• Your name, if you choose to provide it.
• Any game links, portfolio details or other information you include in your message.
• The submission time, the version of the privacy notice shown with the form and your confirmation that you meet the selected category's minimum age: 18 for work enquiries and 14 for other enquiries. We do not ask for your date of birth.

Please do not include passwords, government identification, payment details, health information or other sensitive information in a message.

Delivering the website also involves technical connection information, such as an IP address, browser headers and the resources requested. The third-party services described below receive connection information when your browser downloads their resources.

How we use information

We use contact information to handle your enquiry, reply when appropriate and follow up on the topic you contacted us about. This can include discussing a partnership, reviewing work proposals you choose to send, investigating a game issue or handling another enquiry.

The contact form does not subscribe you to marketing emails. We do not display advertising or sell contact submissions.

Our legal bases for handling information are:

• Our legitimate interests in answering enquiries, assessing relevant work or partnership proposals and operating a secure, reliable website, taking account of the rights of the people concerned.
• Taking steps at your request before entering a contract, where your enquiry concerns a possible contract with us.
• Meeting a legal obligation, where a particular requirement applies.

The age checkbox confirms eligibility to use the selected contact category. It is not a marketing opt-in or permission to use your message for unrelated purposes.

Third-party services and cookies

Cloudflare hosts and protects this website and stores contact submissions for us. It processes technical request information, such as IP addresses, browser details and security events, to deliver and protect the service. We also use Google Fonts for typefaces and Roblox's image delivery services for game artwork. Your browser connects to those services to load their files. Information about these providers is available here:

• Cloudflare Privacy Policy and Customer Data Processing Addendum
• Google Privacy Policy
• Roblox Privacy and Cookie Policy

Cloudflare also measures page loading times and other website performance information for us. Its Real User Measurements service does not use cookies or browser storage to track individual visitors. See Cloudflare's RUM documentation for details.

Our website code does not set cookies or use browser storage for tracking. Cloudflare may use necessary security cookies when protecting the site; its cookie documentation explains these. The server requests public game statistics from Roblox; it does not send contact form messages to Roblox.

If you open a Roblox game or email us, the service you choose will process information under its own privacy terms. These providers may process connection information outside the European Economic Area. Their linked policies explain their processing locations and protections. You can ask us for information about our providers and safeguards for transfers that we arrange.

Storage and sharing

On the public website, contact form submissions are saved in private Cloudflare Workers KV storage under our Cloudflare account for handling your enquiry. They are not published on the website or automatically forwarded to an email or messaging service.

Access is limited to the BadPals team members and service providers who need it to handle the enquiry or operate the website. If you email us directly, your email is also handled by the email providers involved.

Information may need to be disclosed to meet a legal obligation or to investigate misuse of the website. We do not share contact messages for advertising.

Retention and security

We keep enquiry records while we handle the request and any necessary follow-up. We then delete or anonymise information that is no longer needed, unless keeping a record is necessary for a legal obligation or an ongoing dispute. Deletion is handled manually. Retention depends on the status of the enquiry, the need for follow-up and any applicable legal requirement.

The website does not provide a public page or API for reading stored messages. Access to those records requires authorised access to our Cloudflare account. No internet transmission or storage system can be guaranteed completely secure.

Your choices and requests

You can choose not to use the form. If you have sent us information, email hello@badpals.com to request a copy, a correction or deletion. Use the email address associated with your original message where possible. We may need to confirm that a request comes from the person concerned.

Subject to the conditions in applicable data protection law, you may request access, correction, deletion or restriction of your information, and object to processing based on legitimate interests. Data portability applies where its legal conditions are met. If a separate activity relies on consent, you may withdraw that consent for the future.

You may complain to the Office of the Commissioner for Personal Data Protection in Cyprus, or another relevant data protection authority. You do not have to contact us first. We do not use contact messages to make decisions about people solely by automated means.

Children's privacy

The contact form is intended for people aged 14 or older. The "Work with us" category is for people aged 18 or older. The form requires confirmation of the selected category's minimum age before a message can be sent. This confirmation is not a verification of someone's date of birth.

If you are under 14, please do not send personal information through this form. Ask a parent or guardian to contact us in their own name. Do not provide a child's personal information unless it is necessary for the enquiry.

A parent or guardian who believes a child under 14 has sent us personal information can contact hello@badpals.com so we can investigate and arrange removal where appropriate.

Changes to this policy

We will update this page and its date when the website's information practices change. Privacy questions can be sent to hello@badpals.com.