Privacy policy
Last updated 26 October 2026
The short version
- You can browse the value list, crates, sets, the trade calculator and the changelog without an account.
- We have no ads, no analytics and no tracking cookies, and we never sell or rent your data.
- If you sign in with Discord or Roblox, we keep your account ID and username from that service, plus what you post (trade ads) and add (inventory and wishlist). With Roblox linked, your public Roblox avatar shows on your profile.
- Our servers briefly log IP addresses and browser details to keep the site secure and working.
- Our Discord bot logs who ran which command, and where, to keep it working and stop abuse.
- You can unlink an account or delete yours on your account page, and ask us for a copy of your data or to fix it, wherever you live.
Who we are
Fleevalues.com is a value list for the Roblox game 10 Player Flee, made in cooperation with the makers of 10 Player Flee and run by a small team of staff members, not a company. We are the “controller” of the personal data described here (the party that decides why and how it is used). We are not affiliated with Roblox Corporation. Reach us at privacy@fleevalues.com.
What we collect and why
When you visit
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| IP address, browser and device type, pages requested, time | Delivering pages, preventing abuse and rate limiting, fixing errors | Legitimate interests: running a secure site |
| Theme and display choices, items you recently viewed | Remembering your preferences and showing your recent items | Stored only in your own browser; we never receive it |
When you sign in with Discord or Roblox
Signing in is optional and only needed to post trade ads. We ask Discord only for the basic “identify” permission and Roblox only for your basic profile. We do not receive your email address, password, friends, servers, messages or inventory from them.
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Discord and/or Roblox account ID | Recognising you when you sign in again; linking both accounts | Contract: providing your account |
| Your public Roblox avatar, with Roblox linked | Showing your avatar on your profile and beside your name | Contract |
| Username (display name) from that service | Showing who posted a trade ad | Contract |
| Sign-in session and a “stay signed in” token | Keeping you signed in | Contract |
| Roblox sign-in token, encrypted, from your latest Roblox sign-in | Only to remove Fleevalues from your Roblox App Permissions when you unlink Roblox or delete your account | Contract |
| Your role and any ban, with its reason and date | Moderation and keeping trading safe | Legitimate interests: preventing scams and abuse |
When you post a trade ad
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Items offered and requested, quantities, your message, status, dates | Showing your trade ad to other traders | Contract |
Trade ads are public: anyone can see the items, your message, your username and, with Roblox linked, your Roblox avatar. Links to your Discord and Roblox profiles, on your trade ads and your trader profile, are shown only to people who are signed in, so they can contact you. Don’t put personal information in trade ad messages.
Your trader profile is public too: your username, your Roblox avatar if Roblox is linked, when you joined, your open trade ads, and the inventory and wishlist you add on your account page. Anyone can find it by searching your username. You can hide your inventory, your wishlist or both in Settings on your account page at any time; hidden lists are only shown to you.
Trade ads you complete or cancel leave the public board but stay in My trade ads until you delete or repost them; anyone with a link to one can still open it. If staff remove a trade ad for breaking our terms, it is hidden from everyone but you and staff, and kept with the reason, the date and the staff member who removed it.
When you use our Discord bot
When you run one of the bot’s commands, Discord sends us your Discord user ID and username, the server and channel you ran it in, and the command with what you typed. The bot logs one line per command (time, your username and ID, the server name and ID, the command) to keep it working and stop abuse. Lists you build with /lf, /trade and /compare are kept in the bot’s memory for 30 minutes and never saved. For staff commands the bot sends your Discord ID to our site to check you are staff, and the change is logged under your username like any other staff edit.
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Discord user ID and username, server name and ID, the command you ran | Answering the command, fixing errors, preventing abuse | Legitimate interests: running a working, safe bot |
If you are on our staff
Staff accounts can also hold an email address and a password (stored hashed, never readable). Every change staff make to items and values is logged with their username, so edits can be reviewed and undone. Staff usernames appear on the public changelog; Discord IDs and internal details never do.
What we don’t collect
No payment details, no precise location, no contacts, and no sensitive data such as health, religion or political views. We don’t make decisions about you by automated means that have legal or similarly significant effects. The trade calculator only calculates values for items you choose.
International transfers
The site is hosted by mijn.host on servers in the Netherlands and elsewhere in the European Union. Our users come from all over the world, so if you live outside the EU your data is transferred there; EU data protection law then applies to it. Where our host’s subcontractors handle data outside the EU, they do so under the European Commission’s standard contractual clauses. Discord and Roblox are based in the United States and process sign-in data there under their own privacy policies.
How long we keep it
| Data | Kept for |
|---|---|
| Server and security logs (IP address, browser) | Up to 12 months, longer only during a security incident or where the law requires |
| Session records (IP address, browser) | Until the session expires, 7 days after your last visit |
| Account (IDs, username, role) | Until you delete it on your account page or ask us to. An account ID you unlink is removed straight away |
| Roblox sign-in token | Until your next Roblox sign-in replaces it, or you unlink Roblox or delete your account |
| Roblox avatar image links | Cached for up to a day, then fetched again so changes show; never stored with your account |
| Trade ads, open or closed | Until you delete them or your account; deleted straight away if your account is banned |
| Trade ads removed by staff, with the reason | Until you delete your account, for moderation; deleted straight away if your account is banned |
| Discord bot command logs | Up to 12 months, like our server logs |
| Ban records | As long as the ban applies, so banned accounts can’t simply return |
| Staff change history | As long as the value list exists, as its public record |
| Backups | Up to 90 days, then rotated out; used only to restore the site after a failure |
Your rights
We give everyone the same rights, wherever you live and whatever your local law requires. You can:
- Know and access what we hold about you and get a copy.
- Correct anything that is wrong.
- Delete your account and data. You can do this yourself in Settings on your account page; it also removes Fleevalues from your Discord authorized apps and your Roblox App Permissions.
- Unlink Discord or Roblox in Settings, as long as the other stays linked so you can still sign in. Unlinking also removes Fleevalues from your Discord authorized apps, or from App Permissions in your Roblox settings. If it is still listed there, you can remove it yourself.
- Take your data with you in a machine-readable format.
- Object to or restrict how we use it, including our legitimate interests.
- Withdraw consent at any time, where we rely on it.
- Opt out of any sale, sharing or targeted advertising. We don’t do these, but the right is yours.
- Not be treated differently for using any of these rights.
- Complain to your data protection authority (see the regional notes below).
Email privacy@fleevalues.com from the account involved, or tell us your Discord or Roblox username so we can confirm it’s you. Someone you authorise can also ask for you. We aim to reply within 30 days, free of charge. If we refuse a request, we tell you why and how to appeal.
Children
Anyone can browse the site without an account. Accounts are for people aged 13 or older, the same minimum Discord sets. If your country sets a higher age for agreeing to online services (up to 16 in parts of Europe, for example), you need a parent or guardian’s permission to make an account.
We don’t knowingly collect personal data from children under 13. If you believe a child under 13 has made an account, email privacy@fleevalues.com and we will delete it.
Security
The site is served over encrypted connections, staff passwords are stored hashed, and only staff who need it can reach account data. No system is perfectly secure; if a breach puts your rights at risk, we will tell you and the relevant authorities as the law requires.
Regional notes
The rights above already cover what these laws require. This is where to complain if you’re unhappy with our answer; you can also contact any authority first.
| Where you live | Main law | Who to complain to |
|---|---|---|
| European Economic Area | GDPR | Your local data protection authority |
| United Kingdom | UK GDPR, Data Protection Act 2018 | Information Commissioner’s Office (ICO) |
| Switzerland | Federal Act on Data Protection (FADP) | Federal Data Protection and Information Commissioner (FDPIC) |
| United States | California CCPA/CPRA and other state privacy laws; COPPA for children under 13 | Your state attorney general or the Federal Trade Commission |
| Canada | PIPEDA; Quebec Law 25 | Office of the Privacy Commissioner of Canada; Commission d’accès à l’information (Quebec) |
| Brazil | LGPD | Autoridade Nacional de Proteção de Dados (ANPD) |
| Elsewhere in Latin America | e.g. Argentina, Mexico, Chile and Colombia data protection laws | Your national data protection authority |
| South Africa | POPIA | Information Regulator |
| Nigeria, Kenya and the rest of Africa | e.g. Nigeria Data Protection Act, Kenya Data Protection Act | Your national data protection commission |
| India | Digital Personal Data Protection Act | Data Protection Board of India |
| Japan, South Korea, Singapore, the Philippines and the rest of Asia | e.g. APPI, PIPA, PDPA, Data Privacy Act | Your national privacy commission |
| Australia | Privacy Act 1988 | Office of the Australian Information Commissioner (OAIC) |
| New Zealand | Privacy Act 2020 | Office of the Privacy Commissioner |
California and other US states: in the past 12 months we collected identifiers (account IDs, usernames, IP addresses), internet activity (pages requested) and the content you post, for the purposes and from the sources described above. We have not sold or shared personal information, and we don’t knowingly sell or share data of anyone under 16.
Changes to this policy
We update this page when what we collect or how we use it changes, and change the date at the top. If a change is significant, we’ll point it out on the site before it takes effect.
Questions about this page? Email privacy@fleevalues.com. See also the terms of service.
