Fleevalues.com

Privacy policy

Last updated 26 October 2026

What we collect, why, how long we keep it, and the rights you have, wherever you are in the world.

The short version

  • You can browse the value list, crates, sets, the trade calculator and the changelog without an account.
  • We have no ads, no analytics and no tracking cookies, and we never sell or rent your data.
  • If you sign in with Discord or Roblox, we keep your account ID and username from that service, plus what you post (trade ads) and add (inventory and wishlist). With Roblox linked, your public Roblox avatar shows on your profile.
  • Our servers briefly log IP addresses and browser details to keep the site secure and working.
  • Our Discord bot logs who ran which command, and where, to keep it working and stop abuse.
  • You can unlink an account or delete yours on your account page, and ask us for a copy of your data or to fix it, wherever you live.

Who we are

Fleevalues.com is a value list for the Roblox game 10 Player Flee, made in cooperation with the makers of 10 Player Flee and run by a small team of staff members, not a company. We are the “controller” of the personal data described here (the party that decides why and how it is used). We are not affiliated with Roblox Corporation. Reach us at privacy@fleevalues.com.

What we collect and why

When you visit

DataWhyLegal basis (GDPR)
IP address, browser and device type, pages requested, timeDelivering pages, preventing abuse and rate limiting, fixing errorsLegitimate interests: running a secure site
Theme and display choices, items you recently viewedRemembering your preferences and showing your recent itemsStored only in your own browser; we never receive it

When you sign in with Discord or Roblox

Signing in is optional and only needed to post trade ads. We ask Discord only for the basic “identify” permission and Roblox only for your basic profile. We do not receive your email address, password, friends, servers, messages or inventory from them.

DataWhyLegal basis (GDPR)
Discord and/or Roblox account IDRecognising you when you sign in again; linking both accountsContract: providing your account
Your public Roblox avatar, with Roblox linkedShowing your avatar on your profile and beside your nameContract
Username (display name) from that serviceShowing who posted a trade adContract
Sign-in session and a “stay signed in” tokenKeeping you signed inContract
Roblox sign-in token, encrypted, from your latest Roblox sign-inOnly to remove Fleevalues from your Roblox App Permissions when you unlink Roblox or delete your accountContract
Your role and any ban, with its reason and dateModeration and keeping trading safeLegitimate interests: preventing scams and abuse

When you post a trade ad

DataWhyLegal basis (GDPR)
Items offered and requested, quantities, your message, status, datesShowing your trade ad to other tradersContract

Trade ads are public: anyone can see the items, your message, your username and, with Roblox linked, your Roblox avatar. Links to your Discord and Roblox profiles, on your trade ads and your trader profile, are shown only to people who are signed in, so they can contact you. Don’t put personal information in trade ad messages.

Your trader profile is public too: your username, your Roblox avatar if Roblox is linked, when you joined, your open trade ads, and the inventory and wishlist you add on your account page. Anyone can find it by searching your username. You can hide your inventory, your wishlist or both in Settings on your account page at any time; hidden lists are only shown to you.

Trade ads you complete or cancel leave the public board but stay in My trade ads until you delete or repost them; anyone with a link to one can still open it. If staff remove a trade ad for breaking our terms, it is hidden from everyone but you and staff, and kept with the reason, the date and the staff member who removed it.

When you use our Discord bot

When you run one of the bot’s commands, Discord sends us your Discord user ID and username, the server and channel you ran it in, and the command with what you typed. The bot logs one line per command (time, your username and ID, the server name and ID, the command) to keep it working and stop abuse. Lists you build with /lf, /trade and /compare are kept in the bot’s memory for 30 minutes and never saved. For staff commands the bot sends your Discord ID to our site to check you are staff, and the change is logged under your username like any other staff edit.

DataWhyLegal basis (GDPR)
Discord user ID and username, server name and ID, the command you ranAnswering the command, fixing errors, preventing abuseLegitimate interests: running a working, safe bot

If you are on our staff

Staff accounts can also hold an email address and a password (stored hashed, never readable). Every change staff make to items and values is logged with their username, so edits can be reviewed and undone. Staff usernames appear on the public changelog; Discord IDs and internal details never do.

What we don’t collect

No payment details, no precise location, no contacts, and no sensitive data such as health, religion or political views. We don’t make decisions about you by automated means that have legal or similarly significant effects. The trade calculator only calculates values for items you choose.

Cookies and local storage

We use only what the site needs to work, so we don’t show a cookie banner. There are no advertising, analytics, social media or tracking cookies, and no third-party scripts. Fonts and images are served from our own servers.

NameTypePurposeLasts
themeLocal storageYour light or dark theme choice. Never sent to usUntil you clear site data
bgLocal storageWhich background you picked. Never sent to usUntil you clear site data
recently-viewedLocal storageThe last 12 items you opened, shown on the value list. Never sent to usUntil you clear site data
trade-detailsLocal storageWhether you keep the trade details open in the calculator. Never sent to usUntil you clear site data
fleevaluescom-sessionCookie, strictly necessaryKeeps you signed in and your session working7 days of inactivity
XSRF-TOKENCookie, strictly necessaryProtects forms and sign-in against cross-site attacks7 days of inactivity
remember_web_…Cookie, strictly necessaryKeeps you signed in. Set only when you sign inUp to 400 days, or until you sign out

You can block or delete cookies in your browser settings. Blocking the strictly necessary ones will stop signing in from working. We treat Global Privacy Control and Do Not Track signals as opt-outs, though as we don’t track you there is nothing extra to turn off.

Who we share it with

We do not sell personal data and do not share it for targeted advertising. We only share it with:

  • Our hosting provider, mijn.host, which stores and serves the site and its data for us. Its data processing agreement lets it use the data only on our instructions and binds its own subcontractors to the same rules.
  • Discord and Roblox, only when you choose to sign in with them. They handle that sign-in under their own privacy policies. To show Roblox avatars we ask Roblox’s public avatar service for the images by Roblox account ID; we send it nothing else about you, and your browser loads the images from our servers.
  • Authorities, only if the law requires it, or to protect people from fraud or harm.
  • A successor, if the site is ever transferred to new operators, who must keep this policy or tell you first.

International transfers

The site is hosted by mijn.host on servers in the Netherlands and elsewhere in the European Union. Our users come from all over the world, so if you live outside the EU your data is transferred there; EU data protection law then applies to it. Where our host’s subcontractors handle data outside the EU, they do so under the European Commission’s standard contractual clauses. Discord and Roblox are based in the United States and process sign-in data there under their own privacy policies.

How long we keep it

DataKept for
Server and security logs (IP address, browser)Up to 12 months, longer only during a security incident or where the law requires
Session records (IP address, browser)Until the session expires, 7 days after your last visit
Account (IDs, username, role)Until you delete it on your account page or ask us to. An account ID you unlink is removed straight away
Roblox sign-in tokenUntil your next Roblox sign-in replaces it, or you unlink Roblox or delete your account
Roblox avatar image linksCached for up to a day, then fetched again so changes show; never stored with your account
Trade ads, open or closedUntil you delete them or your account; deleted straight away if your account is banned
Trade ads removed by staff, with the reasonUntil you delete your account, for moderation; deleted straight away if your account is banned
Discord bot command logsUp to 12 months, like our server logs
Ban recordsAs long as the ban applies, so banned accounts can’t simply return
Staff change historyAs long as the value list exists, as its public record
BackupsUp to 90 days, then rotated out; used only to restore the site after a failure

Your rights

We give everyone the same rights, wherever you live and whatever your local law requires. You can:

  • Know and access what we hold about you and get a copy.
  • Correct anything that is wrong.
  • Delete your account and data. You can do this yourself in Settings on your account page; it also removes Fleevalues from your Discord authorized apps and your Roblox App Permissions.
  • Unlink Discord or Roblox in Settings, as long as the other stays linked so you can still sign in. Unlinking also removes Fleevalues from your Discord authorized apps, or from App Permissions in your Roblox settings. If it is still listed there, you can remove it yourself.
  • Take your data with you in a machine-readable format.
  • Object to or restrict how we use it, including our legitimate interests.
  • Withdraw consent at any time, where we rely on it.
  • Opt out of any sale, sharing or targeted advertising. We don’t do these, but the right is yours.
  • Not be treated differently for using any of these rights.
  • Complain to your data protection authority (see the regional notes below).

Email privacy@fleevalues.com from the account involved, or tell us your Discord or Roblox username so we can confirm it’s you. Someone you authorise can also ask for you. We aim to reply within 30 days, free of charge. If we refuse a request, we tell you why and how to appeal.

Children

Anyone can browse the site without an account. Accounts are for people aged 13 or older, the same minimum Discord sets. If your country sets a higher age for agreeing to online services (up to 16 in parts of Europe, for example), you need a parent or guardian’s permission to make an account.

We don’t knowingly collect personal data from children under 13. If you believe a child under 13 has made an account, email privacy@fleevalues.com and we will delete it.

Security

The site is served over encrypted connections, staff passwords are stored hashed, and only staff who need it can reach account data. No system is perfectly secure; if a breach puts your rights at risk, we will tell you and the relevant authorities as the law requires.

Regional notes

The rights above already cover what these laws require. This is where to complain if you’re unhappy with our answer; you can also contact any authority first.

Where you liveMain lawWho to complain to
European Economic AreaGDPRYour local data protection authority
United KingdomUK GDPR, Data Protection Act 2018Information Commissioner’s Office (ICO)
SwitzerlandFederal Act on Data Protection (FADP)Federal Data Protection and Information Commissioner (FDPIC)
United StatesCalifornia CCPA/CPRA and other state privacy laws; COPPA for children under 13Your state attorney general or the Federal Trade Commission
CanadaPIPEDA; Quebec Law 25Office of the Privacy Commissioner of Canada; Commission d’accès à l’information (Quebec)
BrazilLGPDAutoridade Nacional de Proteção de Dados (ANPD)
Elsewhere in Latin Americae.g. Argentina, Mexico, Chile and Colombia data protection lawsYour national data protection authority
South AfricaPOPIAInformation Regulator
Nigeria, Kenya and the rest of Africae.g. Nigeria Data Protection Act, Kenya Data Protection ActYour national data protection commission
IndiaDigital Personal Data Protection ActData Protection Board of India
Japan, South Korea, Singapore, the Philippines and the rest of Asiae.g. APPI, PIPA, PDPA, Data Privacy ActYour national privacy commission
AustraliaPrivacy Act 1988Office of the Australian Information Commissioner (OAIC)
New ZealandPrivacy Act 2020Office of the Privacy Commissioner

California and other US states: in the past 12 months we collected identifiers (account IDs, usernames, IP addresses), internet activity (pages requested) and the content you post, for the purposes and from the sources described above. We have not sold or shared personal information, and we don’t knowingly sell or share data of anyone under 16.

Changes to this policy

We update this page when what we collect or how we use it changes, and change the date at the top. If a change is significant, we’ll point it out on the site before it takes effect.

Questions about this page? Email privacy@fleevalues.com. See also the terms of service.