Last updated: 22 September 2026
Status: Development Draft — to be finalised before public beta

This is a draft. Sections marked to be established before public beta are not yet settled, and the sections describing retention, account deletion and transport security describe a development system rather than a finished one. They say so plainly rather than promising something that is not in place.

Welcome to JustARevival. JustARevival is an independent, invite-only Roblox fan project dedicated to recreating the classic Roblox experience.

We respect the privacy of our community and believe players should understand what information we collect, why we collect it, how it is used and who may have access to it. This policy explains how personal information is handled when you visit our website, create an account, play games, upload content or interact with other members of JustARevival. It applies to the website, game client, game servers and associated community services.

1. Who We Are

JustARevival is an independently operated Roblox fan project. We are not affiliated with, endorsed by, sponsored by or officially connected to Roblox Corporation. JustARevival operates its own account system, website, game servers and community moderation services.

For privacy enquiries, account information requests or concerns about how your personal information is handled, please contact JustARevival Administration.

Privacy contact: to be established before public beta
Official website: to be added

Details identifying the legally responsible data controller and any additional contact information required by applicable law will be provided before public beta.

2. Information We Collect

2.1 Account information

• Your username and account identifier.
• Your password hash and associated salt.
• Your account creation date and last online activity.
• Your avatar appearance, profile description and account settings.
• Your Robux and Tickets balances.
• Your inventory, purchases and transaction history.
• Your membership settings and administrative privileges, where applicable.
• Your invitation code and invitation relationships.
• Your account status, including moderation restrictions and bans.
• Your two-factor authentication settings and associated information, where applicable.

Our database also contains fields for email addresses and dates of birth. These are not currently required for ordinary registration and are not presently used to provide age-based protections.

2.2 Passwords and authentication

Account passwords are protected using a salted cryptographic hashing system based on scrypt. Your original password is not stored in the account database. Session tokens are used to maintain authentication when accessing the website and compatible game services. Keep your password and session information private and never share them with other players.

2.3 Technical and connection information

Your IP address is processed when performing login and registration rate limiting, report submission limits and game-server origin checks. IP addresses used for these checks are normally processed in memory rather than stored in the account database.

Certain security events, including rejected game-server requests and rate-limit events, may cause IP addresses to be written to backend logs. These logs are separate from the account database and currently do not have an automatic expiry or rotation process.

2.4 Chat messages

JustARevival records in-game chat messages for moderation and community safety. Records may include the message content, the sender's username and account identifier, the game and server it was sent in, the time, any automated moderation findings and associated report information. Messages filtered or blocked because an account is muted may still be recorded.

2.5 Uploaded content

When you upload content we process the file and associated information: games, places and models; scripts and their source code; clothing, decals, faces and other images; audio files; names and descriptions; upload dates and creator information; and automated scanning results and moderation decisions.

Uploaded assets may be reviewed before they become publicly available. Private or unlisted content may also be accessed by authorised moderation systems when necessary for content review or an investigation.

2.6 Reports and moderation history

When you submit a report or appeal we process the information you provide. Moderation records may include reports submitted by players, the accounts or assets involved, evidence and relevant chat messages, automated moderation findings, warnings, restrictions, suspensions and bans, appeal submissions and decisions, and records identifying moderators who performed moderation-related actions.

3. How We Use Your Information

Account management: creating accounts, authenticating players, maintaining profiles and providing access to the website.
Gameplay: allowing players to join games, customise avatars, manage inventories and interact with the platform.
Community moderation: reviewing reports, detecting inappropriate content, investigating misconduct and enforcing community rules.
Security: detecting suspicious activity, limiting abusive requests, protecting accounts and maintaining game-server security.
Technical operation: diagnosing errors, maintaining server stability and supporting website functionality.
Communication: delivering account notifications, moderation notices and messages.
Appeals: reviewing disputed moderation decisions and maintaining relevant evidence.

We do not intend to use personal information for purposes unrelated to operating and protecting JustARevival without an appropriate lawful basis.

4. Automated Moderation and Artificial Intelligence

JustARevival uses automated systems to assist with community moderation. These may examine chat messages, uploaded assets, player reports and relevant account history.

4.1 External AI moderation

When JustARevival's external AI moderation system is running, relevant information is transmitted to OpenAI for analysis. Depending on the investigation this may include:

• Chat messages and their associated usernames.
• Player usernames and moderation history.
• Uploaded script source code.
• Uploaded images, including clothing, decals and faces.
• Player reports and the information provided by reporters.

4.2 Automated moderation decisions

Automated moderation may issue warnings, restrict account features, suspend accounts or apply indefinite bans where sufficient evidence supports such action.

You may request human review of a disputed automated indefinite ban. Where an appeal has been rejected by an automated review, you can ask for a moderator to decide it, and the automated system cannot then decide it again.

Additional rights may apply under data protection law where a decision is made solely through automated processing and produces legal or similarly significant effects.

5. Sharing Information With Third Parties

5.1 OpenAI

OpenAI provides external AI moderation functionality. When the moderation system is active, relevant chat messages, usernames, account moderation history, player reports, uploaded images and script source code may be transmitted to OpenAI. What is submitted depends on the moderation task being performed. OpenAI's privacy information is available at openai.com/policies.

5.2 Roblox asset delivery

JustARevival may retrieve original Roblox assets through Roblox's asset-delivery service. These requests are made by our backend. The current asset-fetching system does not intentionally transmit JustARevival player account information to Roblox. Where an upstream Roblox authentication cookie is configured, it belongs to the account used for the upstream request, not the JustARevival player requesting the asset.

5.3 Hosting and infrastructure providers

JustARevival is currently operated in a development environment. Public hosting and infrastructure arrangements have not yet been finalised. Before public beta this section will be updated to identify the relevant hosting, network and other service providers that process personal information.

5.4 Legal and safety requirements

Information may be disclosed where required by applicable law or a valid legal request. Relevant information may also be provided to appropriate authorities where legally necessary to address serious threats, suspected criminal activity or risks to player safety.

6. Cookies and Website Sessions

JustARevival uses session cookies to maintain account authentication and provide compatibility with its game client and Studio. The website uses two authentication cookies.

6.1 rbxsession — maintains your authenticated website session. Configured with HttpOnly and SameSite=Lax.

6.2 .ROBLOSECURITY — provides compatibility with game-client and Studio authentication. Configured with SameSite=Lax and is not marked HttpOnly, because of compatibility requirements in the current implementation.

Both contain an authentication session token and have a configured lifetime of 30 days. Neither currently uses the Secure attribute, because the development website operates over HTTP.

The website does not use localStorage, sessionStorage or IndexedDB, and includes no third-party advertising or analytics scripts. Authentication cookies are used to provide account access rather than for advertising or behavioural tracking. Cookie configuration and transport security will be reviewed before public beta.

7. How Long We Keep Your Information

7.1 Chat messages. Ordinary in-game chat records are retained for 30 days. Messages associated with an active moderation report or investigation may be retained for longer.

7.2 Account sessions. Authentication sessions have a configured expiry period of 30 days.

7.3 Account information. Retained while an account remains active, subject to moderation and account-removal processes. An account that remains indefinitely banned for 90 days is automatically marked as deleted by the moderation system. This prevents normal account access but does not currently erase the account's personal information from the database.

7.4 Moderation and transaction records. The current system has no automatic expiry or deletion period for moderation actions, moderation audit records, reports, appeals or transaction history. These records may therefore remain stored indefinitely unless separately deleted or a retention process is introduced.

7.5 Messages and notifications. Retained unless deleted by the player or removed through another applicable process.

7.6 Technical logs. The current backend logging system does not automatically rotate or expire its log files. These logs may contain technical information, including IP addresses associated with certain security events. Appropriate retention and deletion procedures will be established before public beta.

7.7 Backups. Backup arrangements and retention periods have not yet been finalised.

8. Account Deletion and Personal Data Erasure

JustARevival distinguishes between account removal for moderation purposes and requests to erase personal information.

8.1 Moderation-related account deletion. An account that remains indefinitely banned for 90 days is automatically marked as deleted. The account becomes inaccessible through normal account functions, but its underlying database record is retained, including its username, password hash, account settings and moderation history. Moderation-related account deletion does not currently constitute permanent erasure of personal information.

8.2 Personal data erasure requests. Players may request the deletion of their personal information by contacting JustARevival Administration. We will assess such requests in accordance with applicable data protection law. The current system does not yet provide a dedicated personal-data erasure function; this and an appropriate process for handling requests must be established before public beta. Some information may need to be retained where there is a valid legal basis for doing so.

8.3 Previously published content. Games and assets created by deleted accounts may remain available on JustARevival, and may be attributed to a deleted-content account rather than the original username. Requests concerning personal information contained within published content will be assessed separately.

9. Information Visible to Other Players

Depending on the features you use, other players may be able to see your username and avatar, public profile information, published games and uploaded assets, publicly available inventory and achievements, messages sent through multiplayer chat, and activity within games.

Do not publish information that you wish to keep private. Other players may record or copy information that you make publicly available. Your password hash, authentication secrets and private moderation records are not intended to be publicly accessible.

10. Invitations and Connected Accounts

JustARevival uses an invitation system to manage account registration and community access. Invitation records may identify which invitation code was used to create an account and the relationship between inviting and invited accounts. This may be used to administer invitations, investigate abuse and examine potential attempts to evade account restrictions.

An account will not automatically receive a moderation penalty solely because it is connected to another account through the invitation system. Individual accounts are assessed using the available evidence.

11. Children's Privacy

JustARevival is a gaming community that may be accessed by younger players. We recognise that younger players require additional protection when using online services.

The current development system does not enforce a minimum registration age or provide age-specific filtering based on a player's date of birth. The minimum registration age and appropriate protections for younger players will be determined and implemented before public beta.

Players should not share their home address, school, telephone number, passwords or other sensitive personal information through the platform. Parents and guardians may contact JustARevival Administration with questions or concerns about a child's personal information.

12. Protecting Your Information

JustARevival uses account authentication, password hashing, access restrictions and moderation controls to help protect player information. Access to private account information should be limited to authorised personnel and systems that require it for legitimate operational purposes. We also use security measures intended to reduce unauthorised account access and abusive requests. However, no online service can guarantee absolute security.

Development environment

The current development website operates over HTTP, and authentication cookies do not yet use the Secure attribute. This configuration is not intended for public deployment. HTTPS and appropriate authentication security measures must be implemented before public beta.

Players should use unique passwords, keep their login information private and report suspected account compromise.

13. Your Privacy Rights

Depending on the circumstances and applicable data protection law, you may have rights concerning your personal information. These may include the right to request access to personal information held about you; correction of inaccurate information; deletion in applicable circumstances; restriction of certain processing; objection to certain uses; eligible information in a portable format; withdrawal of consent where consent is the lawful basis; and rights relating to certain decisions made solely through automated processing.

These rights are not absolute, and some information may need to be retained where an applicable legal basis or obligation requires it.

To submit a privacy request, contact JustARevival Administration.
Privacy contact: to be established before public beta

You may also raise a concern with the UK Information Commissioner's Office at ico.org.uk.

14. Lawful Basis for Processing

Where UK data protection law applies, JustARevival must have an appropriate lawful basis for processing personal information. Different activities may require different lawful bases. These activities include providing and maintaining player accounts; authenticating users and maintaining sessions; operating the in-game economy; recording and reviewing chat messages; investigating reports and enforcing community rules; processing information through external AI moderation services; maintaining security logs and preventing abuse; and handling appeals and privacy-related requests.

The applicable lawful basis for each activity will be documented before public beta. Where required, additional information about these lawful bases will be made available to players.

15. International Data Transfers

JustARevival may use external service providers that process personal information outside the United Kingdom. The current AI moderation system communicates with OpenAI. The locations in which personal information is processed, and any relevant international transfer arrangements, will be confirmed before public beta. Where applicable data protection law requires safeguards for international transfers, appropriate safeguards must be established.

16. Changes to This Privacy Policy

We may update this policy when JustARevival introduces new features, changes its information-handling practices or needs to address new legal requirements. The latest version will be published on our official website with an updated revision date. Where required, we will provide additional notice or request consent before introducing changes to how personal information is processed.

17. Contact Us

If you have questions about this policy, wish to exercise your privacy rights or want to raise a concern about how your information is handled, please contact JustARevival Administration.

Privacy contact: to be established before public beta
Official website: to be added

JustARevival — Independent Roblox Fan Project. Not affiliated with, endorsed by or officially connected to Roblox Corporation.
See also our community rules and disclaimer.