Privacy Policy
This page explains what data XCSTUDIOS collects, why, and how to control it. It applies to xcstudios.pages.dev and the Aegis Roblox Studio plugin.
Last updated August 2026 · This is a plain-language summary, not a substitute for legal advice.
1. Who we are
XCSTUDIOS is a Roblox asset marketplace. For anything in this policy, reach us on Discord: xcs6.
2. What we collect
| Data | From | Why |
|---|---|---|
| Username, star rating, comment, date | Anyone who submits a review | Public testimonials on the site |
| Server name, description, invite link, optional owner name/Discord/avatar, stats | Added by us about partner communities | Partner directory page |
| Name, role, description, Discord handle, avatar | Added by us about contributors | Public credits page |
| Email + password (hashed by our auth provider) | Site admin only | Signing in to manage the site — regular visitors never create an account |
| Roblox user ID, in-plugin username, last-seen time | The Aegis Studio plugin, if you use it | License checks and anti-piracy enforcement |
| Roblox user ID + a ban reason | Set by us | Blocking abusive plugin use |
| Product images/videos and logos | Uploaded by us | Shown publicly in the catalog/partners/credits pages |
| Aggregate page-view counts, referrer, country, browser | Umami analytics | Understanding traffic — no cookies, no cross-site tracking, no ad networks |
3. What we don't do
We don't sell your data. We don't run ad trackers or share data with advertisers. We don't ask visitors to create an account just to browse, review, or buy — the only login on this site is for our own admin.
4. Purchases
Checkout happens on third-party platforms we link out to (BuiltByBit, ClearlyDev, or Discord). We don't process or store your payment details — each platform handles that under its own privacy policy.
5. The Aegis plugin
If you install a product that uses Aegis licensing, the plugin sends your Roblox user ID and username to our database so it can confirm you're allowed to use it, and shows whether you were recently active. If your ID is blacklisted, the plugin will refuse to run. This is the minimum needed to stop leaked/pirated copies — we don't collect anything from inside your actual Roblox game or account beyond this.
6. Where it's stored
Data lives in our Supabase project (database, authentication, and file storage) and the site itself is hosted on Cloudflare Pages. Both are data processors acting on our instructions, each with their own security and privacy commitments.
7. Cookies & local storage
We don't use tracking or advertising cookies. The site uses your browser's session storage to keep an admin logged in only until the tab is closed, and local storage for one small flag so the analytics notice doesn't reappear every visit. Umami analytics is cookieless by design.
8. How long we keep it
Reviews, credits, and partner listings stay until removed by us or on your request. Aegis session and blacklist records are kept for as long as needed for licensing/anti-abuse purposes. Admin account data is kept for as long as that account exists.
9. Your rights
If data protection law where you live applies (for example the EU/UK GDPR), you can ask us to access, correct, delete, or export data about you — for instance a review or credit entry with your name on it — and you can object to a specific use. Message us on Discord and we'll act on it. If you're unhappy with our response, you can also complain to your local data protection authority.
10. Children
XCSTUDIOS is not directed at children, and we don't knowingly build profiles of children. We're aware Roblox's community includes many younger developers, so if a parent or guardian believes a child's name, handle, or image appears anywhere on this site (a review, credit, or partner listing) and wants it removed, contact us on Discord and we'll take it down.
11. Changes
We may update this policy as the site changes. Material changes will be reflected in the "last updated" date above.