Anti-cheat for Untitled Space Game.

Who we are

AEGIS is an anti-cheat system for Untitled Space Game (USG) on Roblox. It is operated by AEGIS Digital, the developer of AEGIS, which is the data controller for the data described in this policy. The developer of USG is not responsible for AEGIS, this page, or the handling of data described here.

For privacy questions, use gdpr@aegisac.dev. For general support, use support@aegisac.dev.

What we collect

• Account identifiers. Your Roblox user ID, username, display name and avatar.
• Game activity. Server joins and leaves, movement and position data, and other in-game events that the game reports to the anti-cheat.
• Technical information. Ping, device and platform details, and a coarse region derived from the game server. We do not use your precise location.
• Anti-cheat records. The rule or event that triggered a report, together with the evidence attached to it.
• Moderation records. Notes, decisions and actions connected to your account.
• Messages you send us. If you contact the team, we keep what you send so we can reply and follow up.
• Appeal data. Your appeal message, replies, the decision, the ban details and the timestamps.
• Notification data. If you enable notifications, we store the browser push endpoint and the keys needed to send them.
• Web logs. IP address, browser type, requested page and the time of the request, used for security and troubleshooting.

What we do not collect

• Your Roblox password or login credentials.
• Payment or financial details.
• Precise location or GPS data.
• Private messages you send outside the game.
• Advertising identifiers or advertising profiles.
• Biometric data or data from other apps on your device.

How we collect it

Most of it is collected automatically from Roblox game servers while you play. We also use Roblox's public APIs for basic profile details such as your username and avatar, and we receive information directly from you when you contact us or submit an appeal.

When you sign in to the appeals site, we receive your Roblox account details from Roblox. When you enable notifications, your browser gives us the push subscription needed to reach it. Our web server also records standard request logs.

Why we use it

• To detect, review and act on cheating, exploits and other rule breaking.
• To apply moderation and account restrictions and to explain decisions to the people affected.
• To process appeals, reply to them and keep their history.
• To keep the game, its players and its systems safe.
• To improve detection quality and reduce false positives over time.
• To protect the service against abuse, fraud and security incidents, and to troubleshoot faults.
• To send notifications you have asked for, such as appeal status updates.
• To meet legal obligations and respond to valid requests from authorities.
• To establish, exercise or defend legal claims.

Legal bases

Where data protection law requires a legal basis, we rely on:

• Our legitimate interest in keeping the game fair and secure, preventing abuse and improving detection quality.
• Your consent where we ask for it, for example for browser notifications.
• Legal obligations where they apply, including valid requests from authorities and keeping records for legal claims.

You can object to processing based on legitimate interest at any time by emailing gdpr@aegisac.dev. You can also withdraw consent at any time, which only affects future processing.

Automated checks and human review

AEGIS uses automated checks to spot activity that may break the rules. A flag is not a ban. Before an account restriction is applied, the activity is reviewed by a person. You can appeal any ban through the appeals service.

Automated checks help with pattern detection, but they do not make final moderation decisions on their own.

Sharing

We do not sell personal data. We do not share it for advertising, and we do not give it to data brokers.

• Roblox. When a moderation action or account restriction requires it, or when Roblox needs the information for platform safety.
• Hosting and infrastructure providers. Providers that store or process data on our behalf, under a contract that limits them to the service they provide.
• Authorities. When the law requires it, or when it is necessary to protect the rights, safety or security of players, the service or others.
• A successor. If the service is transferred to another operator, data may transfer as part of it, under this policy.

Where data is stored and international transfers

AEGIS data is stored on servers in the European Union. Data is transmitted over encrypted connections between the game, our services and the people who review it.

Roblox is based in the United States. Sharing data with Roblox may involve a transfer outside the European Economic Area or the United Kingdom. Where the law requires it, we use appropriate safeguards for those transfers, such as standard contractual clauses.

How long we keep it

We keep data only for as long as we need it for the purposes described above.

• Technical telemetry. Movement and device data is kept for up to 60 days.
• Violation and moderation records. Kept for as long as needed for safety, appeals and accountability, then deleted or anonymised.
• Appeal records. Kept permanently so the appeal and its history stay available.
• Push subscriptions. Kept until you disable notifications, the subscription expires, or the service is discontinued.
• Support messages. Kept for as long as needed to resolve the request and keep a record of it.
• Web server logs. Kept for a short period for security and troubleshooting.
• Legal holds. Some records may be kept longer when the law requires it or to establish, exercise or defend legal claims.

When data is no longer needed, we delete it or anonymise it.

Security

Access to AEGIS data is limited to the people who need it, and access is granted on a least-privilege basis. Access is authenticated, and data is encrypted in transit.

We keep records accurate and available, monitor the service, keep backups and use integrity checks. No system is perfectly secure, but we take reasonable steps to protect what we hold. If you think your data is at risk, email gdpr@aegisac.dev.

If a security incident affects your personal data, we will notify you and the relevant authority where the law requires it.

Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct data that is wrong or incomplete.
• Delete your data.
• Restrict how we use your data.
• Object to processing based on legitimate interest.
• Receive your data in a portable format.
• Withdraw consent at any time.
• Complain to a data protection authority.

To make a request, email gdpr@aegisac.dev. We may ask for information that confirms the Roblox account belongs to you before we act. We respond within one month, and may extend that by up to two months for complex requests. Requests are free unless they are manifestly unfounded or excessive.

Some records cannot be deleted immediately, for example when we need them for a moderation decision, an appeal, a legal obligation or a legal claim. In that case we explain what is kept and why.

Children and parental requests

Roblox experiences can be played by minors. AEGIS collects only what is needed for anti-cheat and moderation.

A parent or guardian can email gdpr@aegisac.dev to ask about a child's data, request a correction or request deletion. We may ask for information that confirms the guardian relationship before we act, and we handle the request in line with applicable law.

Cookies, local storage and notifications

This page does not set cookies and does not load analytics or advertising scripts. There are no third-party advertising or tracking cookies.

• Appeals site. Stores a sign-in token in your browser's local storage so you stay signed in. Signing out or clearing site data removes it.
• Staff dashboard. Uses a session cookie only to keep staff signed in.
• Notifications. If you enable them, your browser creates a push subscription and we store the endpoint and keys. You can turn notifications off in your browser or site settings at any time.

Appeals

To appeal a ban, you sign in with Roblox. We receive your Roblox user ID, username, display name and avatar so we can find the ban. We store the ban details, your message, any replies, the decision and the timestamps.

Appeal records are kept permanently so the history stays available. You can appeal each ban once, and a ban shortened through an appeal cannot be appealed again. Notifications about an appeal are optional and can be turned off in your browser.

Appeals are handled by AEGIS Digital, the developer of AEGIS, not by the developer of Untitled Space Game.

Other sites

This page links to Roblox and to Untitled Space Game on Roblox. Those sites are not operated by AEGIS Digital, and their own privacy policies apply to them.

Changes to this policy

We may update this policy as AEGIS changes. The date below shows the latest version, and material changes will be reflected here. We encourage you to review this page occasionally.

Contact

AEGIS is operated by AEGIS Digital, the developer of AEGIS, not by the developer of Untitled Space Game. Use these addresses for questions about AEGIS, this policy or your data.

• Support support@aegisac.dev
• Privacy and data requests gdpr@aegisac.dev