Legal Document

Privacy Policy

EFFECTIVE DATE: 24 SEPTEMBER 2026

Sinsoxia Development ("we", "us", or "our") respects your privacy and is committed to protecting the personal data of our players and community members. This Privacy Policy explains how we collect, use, and safeguard your data when you interact with any of our Roblox simulations (including Kallskär RBLX and London TMA), our external web hubs at sinsoxia.dev, and our associated Roblox OAuth applications.

Please note: All in-game entities featured in our simulations — including the fictional "Kallskär Kraftgrupp AB" (KKG) and any depicted aviation authorities or airlines — are purely fictional, alternate-history creations made for roleplay and simulation purposes. This policy governs the real-world data handling of the Sinsoxia development group.

1. Information We Collect

When you authenticate via Roblox OAuth 2.0, connect to our simulation servers, or interact with our web hubs, we may collect the following information:

• Roblox Account Data: Your Roblox User ID, Username, Display Name, and Group Role status. (Note: We do not collect your real name, email address, or password; this data is provided directly by Roblox Corporation via their API).
• Telemetry & Gameplay Data: Actions taken within our simulations — such as control panel interactions, flight inputs, shift or session durations, reactor trips initiated, private server IDs, and general facility or airspace interactions.
• Web & Diagnostic Data: Basic diagnostic data, error logs, and IP addresses required to ensure the stability and security of our web hubs and OAuth authentication.

2. How We Use Your Data

Your data is utilized strictly for operational, technical, and moderation purposes:

• To verify your clearance level or permissions for specific control desks, aircraft, and administrative web panels.
• To persist simulation conditions (e.g., thermal fatigue, cycle day, and burnup in Kallskär; or flight progress and aircraft state in London TMA) across private server sessions via Roblox DataStores.
• To maintain accountability via sequence-of-events logging, ensuring malicious actions (griefing) can be tracked and moderated.
• To secure our web infrastructure against unauthorized access and API abuse.

3. Lawful Basis for Processing (UK GDPR)

Under the UK General Data Protection Regulation (UK GDPR), we process your personal data under the following lawful bases:

• Legitimate Interests: To operate our games, maintain server integrity, prevent griefing, and enforce our Terms of Service.
• Contractual Necessity: To provide the persistent multiplayer services and web-hub features you request.

4. Children's Privacy

Our services are hosted on the Roblox platform, which has its own age-gating and privacy protections. We do not knowingly collect personal, identifiable information (such as real names or email addresses) from children under the age of 13 (or 16 in applicable EU jurisdictions). If we become aware that we have inadvertently collected such data via our external web hubs, we will delete it promptly.

5. Data Retention

We retain your gameplay telemetry and moderation logs only for as long as necessary to fulfill the purposes outlined in this policy. Sequence-of-events logs and web authentication logs are automatically purged or anonymized after 90 days, unless retained longer due to an active moderation investigation or ban appeal.

6. Third-Party Sharing & International Transfers

We do not sell, trade, or rent your personal data to external third parties. Data is only shared with Roblox Corporation infrastructure as required to maintain server connectivity and DataStore persistence. If our web servers are hosted outside the UK/EEA, we ensure that appropriate safeguards (such as Standard Contractual Clauses) are in place to protect your data.

7. Your Rights (UK GDPR)

We process your data transparently and securely. Under the UK GDPR, you have specific rights regarding your personal information, including:

• Right to Access: You may request a copy of the telemetry and moderation data we hold associated with your Roblox ID.
• Right to Erasure (Article 17) & Moderation Safeguards: You may request the deletion of your general telemetry, shift logs, and web-hub data. However, under UK GDPR Article 17(3), the right to erasure does not apply where processing is necessary for our legitimate interests in safeguarding the community, maintaining server integrity, and preventing ban evasion.
  
  To enforce our Terms of Service, we must retain your Roblox User ID on our moderation blacklist. Therefore, if you exercise your right to erasure regarding your moderation history and enforcement data, it will result in an unappealable, permanent suspension from all Sinsoxia Development experiences, as we can no longer safely verify your clearance or manage your account restrictions.
  
  (Note: We cannot delete data stored directly inside Roblox's proprietary platform DataStores; you must contact Roblox Support for platform-level data erasure).

8. Contact Us

For data inquiries, Article 17 erasure requests, or clearance issues, please contact our Data Protection team at privacy@sinsoxia.dev or open a ticket with the moderation team in our official community Discord.