1. Who we are
Midnite Studio, Inc. ("Midnite Studio," "we," "us," or "our") is a Delaware C corporation that creates games and related digital experiences. Our registered address is 8 The Green, STE R, County of Kent, Dover, Delaware, United States, 19901. Questions about this policy can be sent to cp@midnitestudio.gg.
2. Information we may collect
- Information you provide: your name, email address, message, support request, or other information you choose to send us outside a game.
- Website information: basic device, browser, IP address, page-request, and security-log information that our hosting and network providers may process to deliver and protect the site.
- Roblox game information: depending on the game, a Roblox user ID and display name, experience or place identifiers, gameplay events, progress, inventory, non-Robux in-experience currency state, settings, purchase or entitlement signals, server or session identifiers, and safety, moderation, support, or security signals.
- Roblox-controlled information: Roblox controls Roblox account credentials, account settings, platform communications, Robux transactions, payment-card details, and its own platform records. Midnite Studio does not receive your Roblox password or payment-card number.
- Connected-platform information: if you deliberately connect a third-party account, we may receive only the profile, content, or account information covered by the permissions shown during authorization.
- Authorization data: access or refresh tokens needed to operate a connection you approve. We do not ask for or receive your third-party password.
A connected-platform feature accesses data only after you authorize it. For a TikTok connection, the authorization screen identifies the requested permissions before Midnite Studio receives TikTok account data.
3. How we use information
- Provide, operate, secure, troubleshoot, and improve our website and games.
- Save game progress, inventory, settings, entitlements, and other experience features.
- Understand permitted gameplay performance and engagement, balance game systems, and prevent fraud or abuse.
- Respond to questions, support requests, moderation concerns, and account or data-rights requests.
- Perform actions you request through a connected platform, such as importing permitted profile data or publishing content you explicitly select.
- Comply with legal obligations, applicable platform rules, and our agreements.
We do not sell personal information. We do not use connected-platform data for unrelated advertising or build profiles from it for sale.
4. Roblox data boundaries
We use Roblox-derived information only for purposes permitted by Roblox and applicable law, including operating, securing, supporting, and improving our experiences and performing permitted analytics. We do not sell or rent Roblox user data, expose one player's personal information to another player, provide Roblox user data as a service to unrelated third parties, or use it to build unauthorized profiles across unrelated services.
Our Roblox experiences are designed to operate without asking players through in-game prompts for a real name, personal email address, phone number, street address, precise location, password, payment-card number, photograph, or voice recording. If a future feature would collect personal information directly from a child, we will provide any required notice and obtain any required parental authorization before collecting it.
5. When we share information
We do not use separate third-party gameplay analytics, advertising, or support providers to process Midnite-controlled player or game data. Roblox processes game and platform data as the platform operator when our experiences run on Roblox. A connected third-party platform receives information only when you ask us to perform an authorized action there.
Our website hosting and network infrastructure providers may process limited IP address, page-request, browser or device, and security-log information solely to deliver and protect this website. We may also disclose limited information during a corporate transaction or when reasonably necessary to comply with law or protect rights, safety, and security. We do not authorize any provider to use Roblox-derived or connected-platform data for unrelated advertising.
6. Retention and deletion
We keep identifiable information only as long as reasonably needed for its stated purpose. Our normal retention targets are:
- Website request and security logs: up to 90 days.
- User-linked raw gameplay telemetry and session logs: up to 12 months.
- Saved progress, inventory, settings, and non-Robux in-experience currency state: while needed to operate and restore the experience; after an experience is permanently retired, related identifiable saved state is deleted or de-identified within 24 months, unless an earlier valid deletion request or Roblox Right-to-Erasure notice applies.
- Support, moderation, fraud, and safety case records: up to 24 months after the matter closes, unless an active dispute, safety issue, or legal obligation requires longer.
- Connected-platform authorization tokens: only while the connection is active; after disconnection, tokens are invalidated promptly and deleted from our active systems within 30 days unless the platform requires earlier deletion.
- Purchase receipt and entitlement records under our control: as long as needed to honor an entitlement, prevent duplicate fulfillment or fraud, resolve disputes, and meet legal or accounting duties, generally no longer than seven years.
- Protected backups: overwritten or deleted through their normal cycle, generally within 90 days after deletion from active systems.
We may retain de-identified or aggregated information that can no longer reasonably identify a player. A valid deletion request, Roblox Right-to-Erasure notice, platform requirement, or applicable law may require an earlier deletion. We review these periods and shorten them when information is no longer needed.
Roblox may send creators Right-to-Erasure notifications concerning affected experiences. Midnite Studio is responsible for acting on notices that apply to us and deleting covered personal data under our control when no valid basis for retaining it remains.
To request deletion, parental access, or learn how to disconnect a platform, visit our Data Deletion page.
7. Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or receive a copy of personal information, or object to certain processing. You may also revoke a third-party connection through that platform's settings. Contact cp@midnitestudio.gg to make a request. We may verify your identity before completing it.
8. Children and parents
Our Roblox games may be accessible to children. We may process a Roblox user ID and gameplay information needed to operate an experience, subject to Roblox's platform rules and settings. Our games are designed not to ask children to submit direct contact details or other direct identifiers to Midnite Studio through in-game prompts.
A parent or legal guardian may contact us to ask what personal information under Midnite Studio's control is associated with their child, request its deletion, or refuse further collection or use. We may verify the requester's authority before disclosing or deleting information. Stopping use of the affected experience and sending a deletion request prevents further Midnite-controlled collection after the request is completed, except for limited security or legal records.
External developer-account integrations, including a TikTok connection, are not intended for children to authorize on their own. If you are below the age at which you may provide consent, a parent or legal guardian must manage the connection where required.
9. Security and international processing
We use reasonable administrative, technical, and organizational safeguards. No system is completely secure. Our providers and team may process information in countries other than yours, with protections required by applicable law.
10. Third-party services
Roblox, TikTok, and other third-party services have their own privacy policies and control their own platforms. This policy covers Midnite Studio's handling of information, not their independent practices.
11. Changes and contact
We may update this policy as our services or legal obligations change. We will revise the date above and provide additional notice when required.
Contact: Midnite Studio, Inc., 8 The Green, STE R, County of Kent, Dover, Delaware, United States, 19901; cp@midnitestudio.gg.