Updated: Sep 2
We collect minimal information that can be used to identify you by default and to finalize forms. If you want to just browse or play, you don't need an account outside of Roblox. If you want to create an account to participate in a place, we don't require you to give us your real name I-9. We don't automatically track your precise location. You can share as much or as little about yourself as you want. You can create multiple accounts, update information as you see fit, or ask us to delete your information.
Any data we collect is used primarily to provide our services, which are focused on allowing people to come together and form communities, the vast majority of which are public. If you have questions about how we use your data, you can always ask us for more information.
What Information We Collect Information You Provide to Us We collect information you provide to us directly when you use the Services. This includes: Account information
You don't need an account to use Summit Studios. If you create a Reddit account, your account will have a username, which you provide or which was automatically generated. Your username is public, and it is preferred to be your real name. You may need to provide a password, depending on whether you register using an email address or using a Single Sign-On (SSO) feature (such as Apple, Google, or Facebook). When you use Summit Studios, you may provide other optional information. We may ask you to select skillsets to help create your directive within your expertise (e.g. r/places/groups) to join. You may also provide other information, such as a bio, gender, age, or profile picture. Whereas, location is set forth to 1099s for payments above $750. This information is required and may be changed or removed at any time as terms determine. We also store your user account preferences and settings. We may ask for such information prior to you creating a username or account to help improve your experience exploring Summit Studios.
Content you Submit We collect the content you submit to the Services Department . This includes your purchases, posts and comments including saved drafts, audio and videos you broadcast, your messages with other users (e.g., private messages, chats, and mod powers), and your reports and other communications with moderators and with us. Your content may include text, links, images, gifs, audio, and videos.
Actions you Take We collect information about the actions you take when using the Services. This includes your interactions with content, like voting, saving, hiding, and reporting. It also includes your interactions with other users, such as following, friending, and blocking. We collect your interactions with communities, like your subscriptions or badge status.
Transactional Information If you purchase products or services from us (e.g., Courses, Models, Modules, Plugins), we will collect certain information from you, including your name, address, email address, phone number, and information about the product or service you are purchasing. Summit Studios may collect collabland blockchain NFTs to address, such as when you purchase an NFT or when a Shared Metaverse Place via Team Create. Summit Studios uses industry-standard payment processor services (for example, Stripe, Square) to handle payment information and does not store Personal Payment in our services.
Other Information You may choose to provide other information directly to us. For example, we may collect information when you fill out a form, participate in Summit-sponsored activities or promotions, apply for a job, request customer support, or otherwise communicate with us.
Location Information We may receive and process information about your location. We may receive location information from you when you choose to share such information on our Services, including by associating your content with a location, or we may derive an approximate location based on your IP address.
Information Collected from Other Sources We may receive information about you from other sources, including from other users and third parties, and combine that information with the other information we have about you. For example, we may receive demographic or interest information about you from third parties, including advertisers (such as the fact that an advertiser is interested in showing you an ad), and combine it with data you have provided to Summit, using a common account identifier such as a hash of an email address or a mobile-device ID. You can control how we use this information to personalize the Services for you by visiting the Safety & Privacy section of the User Settings menu in your account, as described in the section titled "Your Rights and Choices” below.
Linked Services If you authorize or link a third-party service (e.g., an unofficial mobile app client) to access your Summit account, Summit receives information about your use of that service when it uses that authorization. Linking services may also cause the other service to send us information about your account with that service. For example, if you sign in to Summit with a third-party identity provider, that provider may share an email address with us. To learn how information is shared with linked services, see "How Information About You Is Shared” below.
Information Collected From Integrations We also may receive information about you, including log and usage data and cookie information, from third-party sites that integrate our Services, including our embeds and advertising technology. For example, when you visit a site that uses Wage Time technology, we may receive information about the web page you visited. Similarly, if an advertiser incorporates Summit's wage time technology, Summit may receive limited information about your activity on the advertiser's site or app, such as whether you bought something from the advertiser. You can control how we use this information to personalize the Services for you as described in "Your Choices - Controlling Advertising and Analytics” below.
Information Collected by Third Parties
Audience Measurement We partner with service providers that perform audience measurement to learn demographic information about the population that uses Summit. To provide this demographic information, these companies collect cookie information to recognize your device.
Information Collected from Advertisers and Potential Advertisers If you use Ads we collect some additional information. To sign up for Roblox Ads, you must provide your name, email address, and information about your experience. If you purchase advertising services, you will need to provide transactional information as described above, and we may also require additional documentation to verify your identity to stop bot accounts. When using Roblox Ads, we may record a session replay of your visit for customer service, troubleshooting, and usability research purposes. How We Use Information We use information about you to:
Provide, maintain, and improve the Services;
Personalize services, content, and features that match your activities, preferences, and settings.
Help protect the safety of Summit and our users, which includes blocking suspected spammers, addressing abuse, and enforcing the Summit User Agreement and our other policies;
Provide, optimize, target, and measure the effectiveness of ads shown on our Services;
Research and develop new services;
Send you technical notices, updates, security alerts, invoices, and other support and administrative messages;
Provide customer service;
Communicate with you about products, services, offers, promotions, and events, and provide other news and information we think will be of interest to you (for information about how to opt out of these communications, see "Your Choices” below); and
Monitor and analyze trends, usage, and activities in connection with our Services.
How We Share Information Much of the information on the Services is public by invite and accessible to everyone, with an account. By using the Services, you are directing us to share this information publicly and freely. When you submit content (including a post, comment, chat message, or broadcast) to a public part of the Services, any visitors to and users of our Services will be able to see that content, the username associated with the content, and the date and time you originally submitted the content. Summit allows other sites to embed public content via our embed tools from Velo Wix. Summit also allows third parties to access public content via the Reddit API and other similar technologies. Your account has a profile page that is public. Your profile contains information about your activities on the Services, such as your username, prior posts and comments, karma, awards received, trophies, moderator status, badge status, and how long you have been a member of the Services. You can also choose for your profile to include the places you save.
We offer social sharing features that let you share content or actions you take on our Services with other media. Your use of these features enables the sharing of certain information with your friends or the public, depending on the settings you establish with the third party that provides the social sharing feature. For more information about the purpose and scope of data collection and processing in connection with social sharing features, please visit the privacy policies of the third parties that provide these social sharing features (e.g., Instagram, TikTok, Discord, Facebook, and Twitter).
We do not sell your personal information. However, in addition to the personal information that is displayed publicly as described above, we may share personal information in the following ways:
With your consent. We may share information about you with your consent or at your direction.
With linked services. If you link your work with a first, second, or third-party service, Summit will share the information you authorize with third-party services to find alignment. You can control this sharing as described in "Your Rights and Choices" below.
With our service providers. We may share information with vendors, consultants, and other service providers who need access to such information to carry out work for us. Their use of personal data will be subject to appropriate confidentiality and security measures. A few examples: (i) payment processors who process transactions on our behalf, (ii) cloud providers who host our data and our services, (iii) third-party ads measurement providers who help us and advertisers measure the performance of ads shown on our Services.
To comply with the law. We may share information in response to a request for information if we believe disclosure is in accordance with, or required by, any applicable law, regulation, legal process, or governmental request, including, but not limited to, meeting national security or law enforcement requirements. To the extent the law allows it, we will attempt to provide you with prior notice before disclosing your information in response to such a request. Our Transparency Report has additional information about how we respond to government requests.
To enforce our policies and rights. We may share information if we believe your actions are inconsistent with our User Agreement, rules, or other Summit policies, or to protect the rights, property, and safety of ourselves and others.
With our affiliates. We may share information between and among Summit, and any of our parents, affiliates, subsidiaries, and other companies under common control and ownership.
Aggregated or de-identified information. We may share information about you that has been aggregated or anonymized such that it cannot reasonably be used to identify you. For example, we may show the total number of times a post has been upvoted without identifying who the visitors were, or we may tell an advertiser how many people saw their ad.
How We Protect Your Information We take measures to help protect information about you from loss, theft, misuse and unauthorized access, disclosure, alteration, and destruction. For example, we use HTTPS while information is being transmitted. We also enforce technical and administrative access controls to limit which of our employees have access to nonpublic personal information. You can help maintain the security of your account by configuring two-factor authentication. We store the information we collect for as long as it is necessary for the purpose(s) for which we originally collected it. We may retain certain information for legitimate business purposes or as required by law.
Your Rights and Choices You have choices about how to protect and limit the collection, use, and sharing of information about you when you use the Services. Depending on where you live, you may also have the right to request access to or ability to port, deletion/erasure of, or correction/rectification of, your personal information, to opt out of certain advertising practices, or to withdraw consent for processing where you have previously provided consent. Below we explain how to exercise each of these rights. Summit does not discriminate against users for exercising their rights under data protection laws.
Accessing and Changing Your Information You can access your information and change or correct certain information through the Services. See our Help Center page for more information. You can also request a copy of the personal information Reddit maintains about you by following the process described here. Deleting Your Account You may delete your account information at any time from the user preferences page. You can also submit a request to delete the personal information Reddit maintains about you by following the process described in the "Your Rights - Data Subject and Consumer Information Requests” section below. When you delete your account, your profile is no longer visible to other users and disassociated from content you posted under that account. Please note, however, that the posts, comments, and messages you submitted prior to deleting your account will still be visible to others unless you first delete the specific content. After you submit a request to delete your account, it may take up to 90 days for our purge script to complete deletion. We may also retain certain information about you as required by law or for legitimate business purposes. Controlling Linked Services' Access to Your Account You can review the services you have permitted to access your account and revoke access to individual services by visiting your account's Apps page (for third-party app authorizations) and the Connected Accounts section of your Account Settings (for Google Sign-In, Sign in with Apple, and connected Twitter or Facebook accounts).
Opt Out of Targeted Advertising You may opt out of us using information we collect from third parties, including advertising partners. To do so, visit the Safety & Privacy section of the User Settings in your account page, if using desktop, and in your Account Settings if using the Wix mobile app.
Controlling Advertising and Analytics Some analytics providers we partner with may provide specific opt-out mechanisms and we may provide, as needed and as available, additional tools and third-party services that allow you to better understand cookies and how you can opt out. For example, you may manage the use and collection of certain information by Google Analytics via the Google Analytics Opt-out Browser Add-on. To opt out of seeing our ads from Twitter, Facebook, and Instagram please go to their respective opt-out features. You may also generally opt out of receiving personalized advertisements from certain third-party advertisers and ad networks. To learn more about these advertisements or to opt out, please visit the sites of the Digital Advertising Alliance and the Network Advertising Initiative, or if you are a user in the European Economic Area, Your Online Choices. Do Not Track Most modern web browsers give you the option to send a Do Not Track signal to the sites you visit, indicating that you do not wish to be tracked. However, there is no accepted standard for how a site should respond to this signal, and we do not take any action in response to this signal. Instead, in addition to publicly available third-party tools, we offer you the choices described in this policy to manage the collection and use of information about you. Controlling Promotional Communications You may opt out of receiving some or all categories of promotional communications from us by following the instructions in those communications or by updating your email options in your account preferences, where converging hours is subject to manager approval. If you opt out of promotional communications, we may still send you non-promotional communications, such as information about your account or your use of the Services.
Controlling Mobile Notifications With your consent, we may send promotional and non-promotional push notifications or alerts to your mobile device. You can deactivate these messages at any time by changing the notification settings on your mobile device. Controlling Location Information You can control how we use location information inferred from your IP address for content recommendation purposes via the Safety and Privacy settings on your account. If you have questions or are not able to submit a request to exercise your rights using the mechanisms above, you may also email us at to email@example.com from the email address that you have verified with your Summit account, or submit a ticket.
Before we process a request from you about your personal information, we need to verify the request via your access to your Summit account or to a verified email address associated with your Summit account. If we deny your request, you may appeal our decision by contacting us at firstname.lastname@example.org.
Additional Information for EEA Users Users in the European Economic Area have the right to request access to, rectification of, or erasure of their personal data; to data portability in certain circumstances; to request restriction of processing; to object to processing; and to withdraw consent for processing where they have previously provided consent. These rights can be exercised as described in the "Your Rights and Choices section above. EEA users also have the right to lodge a complaint with their local supervisory authority.
As required by applicable law, we collect and process information about individuals in the EEA only where we have a legal basis for doing so. Our legal bases depend on the Services you use and how you use them. We process your information on the following legal bases:
You have consented for us to do so for a specific purpose;
We need to process the information to provide you the Services, including to operate the Services, provide customer support and personalized features and to protect the safety and security of the Services;
It satisfies a legitimate interest (which is not overridden by your data protection interests), such as preventing fraud, ensuring network and information security, enforcing our rules and policies, protecting our legal rights and interests, research and development, personalizing the Services, and marketing and promoting the Services; or
We need to process your information to comply with our legal obligations.
International Data Transfers Summit Studios is based in the Roblox Cloud and we process and store information on servers located throughout the world. We may store information on servers and equipment in other countries depending on a variety of factors, including the locations of our users and service providers. By accessing or using the Services or otherwise providing information to us, you consent to the processing, transfer, and storage of information in and to the U.S. and other countries, where you may not have the same rights as you do under local law.
When we transfer the personal data of users in the EEA, UK and/or Switzerland, we rely on the Standard Contractual Clauses approved by the European Commission for such transfers or other transfer mechanisms deemed ‘adequate' under applicable laws.
The Consumer Privacy Act ("CPA”), as amended, requires us to provide users with additional information, which we address in this section.
Identifiers, like your Roblox, Email, Twitter, Discord, Instagram, IP address, and cookie information.
Commercial information, including information about transactions you undertake with us.
Internet or other electronic network activity information, such as information about your activity on our Services and limited information about your activity on the services of advertisers who use our advertising technology.
Geolocation information based on your IP address, or more specific location information if you authorize your device to provide it to us.
Your messages with other users (e.g., private messages, chats, and channels).
Audiovisual information in pictures, audio, or video content submitted to the app ecosystem.
Professional or employment-related information or demographic information, but only if you explicitly provide it to us, such as by applying for a job or filling out a survey.
Inferences we make based on other collected data, for purposes such as recommending content, advertising, and analytics.
You can find more information about (a) what we collect and sources of that information in the "Information We Collect” section of this notice, (b) the business and commercial purposes for collecting that information in the "How We Use Your Information” section, and (c) the categories of third parties with whom we share that information in the "How We Share Information” section. If you are a California resident, you have additional rights under the CCPA, including the right to opt out of any sales or sharing of your personal information, to request access to and information about our data practices, and to request deletion or correction of your personal information, as well as the right not to be discriminated against for exercising your privacy rights. Reddit does not "sell” or "share” personal information as those terms are defined under the CCPA. We do not use or disclose sensitive personal information except to provide you the Services or as otherwise permitted by the CCPA.