Privacy Policy

PrimaryPart ("PrimaryPart," "we," "us," or "our") is a platform developed and operated by PrimaryPart Labs. This Privacy Policy explains how we collect, use, and protect information when you use the PrimaryPart platform, including our website at primarypart.com, our API, and our SDK (collectively, the "Service").

By accessing or using the Service, you agree to the practices described in this Policy.

1. Who This Policy Applies To

PrimaryPart provides analytics and extended API services to Roblox game developers ("Developers"). This Policy covers information we collect about Developers who register for or use the Service.

PrimaryPart is architected to prevent the collection of personally identifiable information regarding players. All player-related data is encrypted and anonymized at the source by the SDK before reaching our infrastructure. See Section 5 for details.

2. Information We Collect

From Developers - via Roblox OAuth

When you connect your Roblox account to PrimaryPart, we receive from Roblox:

• Your Roblox user ID (read-only)
• Your Roblox username (read-only)
• Your Roblox universe (game) metadata, where authorized via the universe:read scope

This access is strictly read-only; we cannot modify your account or act on your behalf. We use Roblox's OAuth 2.0 protocol for authentication. We do not receive or store your Roblox password.

From Game Servers - via the SDK

When you integrate the PrimaryPart SDK into your Roblox game, your game server sends analytical event data to our API. Before any event payload leaves your game server, it is encrypted using a developer-controlled key that you hold within your Roblox DataStore. PrimaryPart receives and stores only the encrypted, anonymized output. We cannot identify individual players from this data.

Automatically

When you use the PrimaryPart dashboard or website, we may collect:

• Session tokens (stored in cookies for authentication purposes)
• Standard server logs (IP address, browser type, request timestamps) for security and reliability

We do not use third-party tracking pixels, behavioral advertising, or persistent analytics cookies.

3. How We Use Your Information

We use the information described above to:

• Authenticate and maintain your Developer account
• Provide analytics, rankings, and platform features via the dashboard and API
• Enforce rate limits and prevent abuse
• Send service-related communications (e.g., account alerts)
• Improve the reliability and performance of the Service

We do not sell your information to third parties.

4. Cookies

We use session cookies only. These are strictly necessary to keep you authenticated while using the dashboard. We do not use advertising cookies, cross-site tracking cookies, or third-party analytics.

5. Player Data and Anonymization

PrimaryPart is architected so that we function as a Data Processor, not a Data Controller, with respect to your players. Player-related event data is encrypted at the source using a cryptographic key that is automatically generated locally by the PrimaryPart Roblox SDK. This key is stored exclusively within your game's private Roblox DataStore and never travels through any HTTP requests to PrimaryPart's infrastructure or any external servers. PrimaryPart holds no copy of this key and has no ability to link stored records to real player identities.

If a player exercises a deletion right, the Developer is responsible for removing the corresponding key from their Roblox DataStore. Once that key is removed, any records PrimaryPart holds for that player become permanently and irrecoverably anonymous.

6. Data Roles

7. Infrastructure and Storage

All data is stored on Cloudflare infrastructure, including Cloudflare D1 (relational database), Cloudflare KV (session and API key store), Cloudflare R2 (logs and historical snapshots), and Cloudflare Workers (edge compute). Cloudflare operates globally distributed data centers. For details on Cloudflare's data practices, refer to Cloudflare's Privacy Policy.

8. Third-Party Services

• Roblox - OAuth 2.0 authentication and universe access. Governed by Roblox's Privacy Policy.
• Cloudflare - Infrastructure and edge network. Governed by Cloudflare's Privacy Policy.
• Email provider - Used for transactional emails only (e.g., account notifications). No marketing emails are sent without explicit opt-in.

9. Age Requirement

The Service is intended for users who are 13 years of age or older. By using PrimaryPart, you represent that you meet this requirement. If we learn that a user under 13 has created an account, we will promptly delete their information.

10. Data Retention

Developer account data is retained for as long as your account is active. You may request deletion of your account and associated data at any time by contacting [email protected]. Anonymized event records may be retained after account deletion, as they cannot be linked to any identifiable individual.

11. Your Rights

You may have rights to access, correct, or delete your personal data. To exercise any of these rights, contact us at [email protected]. We will respond within a reasonable timeframe.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date at the top of this page. Your continued use of the Service after that date constitutes acceptance of the updated policy.

13. Contact

For questions, requests, or concerns regarding this Privacy Policy:
PrimaryPart Labs
[email protected]