HubifyHubify
Legal

Hubify

Privacy Policy

Valid from: 21/08/2026 · Updated: 01/10/2026

Introduction

This document provides detailed information regarding how Hubify ("we", "us", "our") collects, uses, stores, and protects personal data when you interact with our website at https://hubifyrblx.com or our official Discord communications server.

Hubify operates as an open-access community discovery, recruitment, and advertising platform connecting Roblox and Discord communities, rather than a commercial corporation or an external moderation agency.

For the purposes of applicable data protection legislation (including the EU/UK General Data Protection Regulation and US State Privacy Laws), our operations and server infrastructure are governed and hosted in the State of California, United States. For inquiries, to exercise your privacy rights, or to contact our Data Controller, email [email protected] or open a ticket in our community support category.

Summary of Points (SoP)

We limit what information is required. We require only the data that enables us to create your account, provide and maintain our services, and satisfy legal obligations. The rest is optional. In the preceding months, Hubify has collected and processed the following categories of information to provide and secure our platform:

  • Discord & Roblox Profiles

    • Specific Data Points Collected: Discord ID, Username, Avatar, Profile Banner, Discord server memberships, Roblox Username, and Roblox groups owned or joined.
    • Purpose & Legal Basis: Contractual Necessity: Authenticating your identity via OAuth, linking accounts, displaying public community profiles, and verifying administrative ownership over submitted servers/groups.
    • Third Parties Shared With: Discord API (OAuth) and Roblox API.

  • User Submissions & Community Listings

    • Specific Data Points Collected: Server names, group descriptions, invite links, custom tags, and uploaded banners/icons.
    • Purpose & Legal Basis: Contractual Necessity & Consent: Publishing, indexing, and promoting your community listings across the Hubify directory.
    • Third Parties Shared With: Public website visitors and platform users.

  • Support & Direct Communications

    • Specific Data Points Collected: Email address (when submitting an inquiry) and Discord direct messaging metadata generated by the Hubify Bot.
    • Purpose & Legal Basis: Consent & Legitimate Interest: Communicating regarding support tickets and delivering automated status updates regarding community submissions.
    • Third Parties Shared With: Internal support ticketing system.

  • Shop Transactions & Billing

    • Specific Data Points Collected: Real name, billing address, email for receipts, transaction IDs, and purchased digital tiers.
    • Purpose & Legal Basis: Contractual Necessity & Legal Obligation: Delivering digital goods, validating transactions, preventing chargeback fraud, and meeting statutory tax/accounting duties.
    • Third Parties Shared With: Payment processors (Stripe, PayPal, Tebex).

  • Automated Backend & Security Logs

    • Specific Data Points Collected: IP addresses, browser agent headers, referring URLs, and request timestamps.
    • Purpose & Legal Basis: Legitimate Interest: Preventing DDoS attacks, enforcing API rate limits, mitigating spam, and maintaining server stability.
    • Third Parties Shared With: Cloudflare, Inc. (Edge Network & Registrar) and server hosting infrastructure.

Financial Security Note: Hubify does not collect, process, or store raw credit card numbers, debit card details, or banking credentials. All financial checkout transactions are tokenized and processed securely by our certified third-party payment gateways.

Cookies, Local Storage & Tracking Technologies

Hubify uses cookies and similar storage technologies (such as browser localStorage) to maintain security, keep you signed in, and remember user preferences.

  • Essential System Cookies: We use NextAuth.js session cookies (HttpOnly) to securely maintain your active login state. Without these, the platform cannot function.
  • Edge Routing & Security: Because our domain and network infrastructure operate on Cloudflare, Cloudflare may deploy strictly necessary security tokens (such as __cf_bm) to distinguish malicious bot traffic from legitimate human users and protect against DDoS attacks.
  • UI Preference Storage: We utilize sidebar_state to remember your visual interface layout and hubify_consent (stored for up to 1 year) to log your privacy choices. We also store dismissed notice versions in local storage to prevent repetitive prompts.
  • Attribution & Referrals: We utilize hubify_ref (stored for approximately 30 days) to track referral links for community campaigns.
  • Analytics (Google Analytics): We utilize optional Google Analytics cookies to monitor traffic volume and aggregate usage trends. These measurement cookies are disabled by default and load only if you provide affirmative opt-in consent via our cookie consent banner.

You can adjust, customise, or withdraw your cookie consent at any time by selecting "Cookie settings" in our website footer, or by deleting cookies directly within your browser settings. Blocking essential session cookies will prevent you from signing in.

Data collection methods

We access the Discord and Roblox data listed above through official third-party integrations (Discord OAuth and Roblox API). This data is automatically collected during the login, sign-up, and account verification processes. Email addresses and billing details are collected manually only when you input them into our support ticketing system or checkout page.

Age Eligibility & Minor Protections

Hubify strictly prohibits children under the age of 13 from creating accounts or using our services. We do not knowingly collect personal information from individuals under 13.

  • Users Aged 13 to Majority: If you are between 13 and the legal age of majority in your jurisdiction, you represent that your parent or legal guardian has reviewed and agreed to our Terms of Service and Privacy Policy on your behalf.
  • Parental Access & Takedown Protocol: If a parent or legal guardian discovers that their child under the age of 13 has provided personal data to Hubify without their permission, they may contact us immediately at [email protected]. Upon identity verification, we will promptly locate and securely erase the child's information from all active databases and servers.
  • California Minors (Ages 13 to 16): We will not share personal information of California consumers aged 13 to 16 without explicit opt-in consent.
  • California Content Removal: Users under 18 residing in California may request the removal of public submissions they have posted by contacting support with their account identification.

Global Privacy Rights & Verification

We give you control. Regardless of your geographic location, Hubify extends universal data privacy rights consistent with global frameworks (including GDPR, CCPA/CPRA, and US state privacy statutes):

  • Right to Access & Portability: Request a copy of the personal information Hubify maintains about your account.
  • Right to Rectification: Request corrections to inaccurate, out-of-date, or incomplete data.
  • Right to Erasure / Deletion: Request the deletion of your personal account information, subject to mandatory statutory exceptions.
  • Right to Object & Restrict Processing: Object to data processing grounded in our legitimate interests or restrict how your data is handled.
  • Right to Withdraw Consent: Revoke previously granted consent (such as for optional analytics cookies or support tickets) at any time without negative consequences.
  • No Automated Profiling: Hubify does not subject users to automated decision-making or profiling that produces legal or similarly significant effects.
  • Non-Discrimination & No Sale: We do not sell your personal information. Our platform is funded independently, meaning your personal information is never sold to third parties for cross-context behavioral advertising. We will never discriminate against you for exercising your privacy rights.
  • Right to Lodge a Complaint: EU/EEA and UK users have the right to contact their regional supervisory Data Protection Authority (DPA) regarding our data handling practices.

Identity Verification Protocol: To protect your account from fraudulent deletion or unauthorized disclosure requests, all privacy requests must be submitted through [email protected] or our authenticated support category. We verify requests by confirming ownership of your linked Discord account prior to executing data changes.

Platform Developer API Compliance

Because Hubify relies on third-party APIs to authenticate accounts and verify administrative privileges, we are strictly bound by the developer agreements of Roblox Corporation and Discord Inc.

  • Roblox Right to be Forgotten (RTBF): Hubify complies with the automated RTBF requirements for Roblox data stores. If a user requests full account deletion via Roblox, Hubify actively listens for and processes the RTBF webhooks forwarded by the Roblox API to ensure all associated Roblox identifiers are purged from our databases.
  • Discord API Restrictions: We explicitly guarantee that Discord API data is never used to profile users, circumvent Discord's safety features, or contact users outside of the Discord platform without explicit permission.
  • No AI or Machine Learning Training: Hubify does not use message content, user profiles, or any other data obtained through the Discord or Roblox APIs to train machine learning models or artificial intelligence systems.
  • Data Anonymization Integrity: Hubify strictly forbids the scraping of data and does not attempt to re-identify, de-anonymize, unscramble, unencrypt, or reverse-engineer any API data received from external platforms.

Data Retention & Security

While no digital system is entirely impervious to vulnerabilities, Hubify employs reasonable administrative, technical, and physical safeguards to protect your information.

  • Encryption & Security Standards: All information transmitted within our services is encrypted both in transit (using HTTPS/TLS provided by Cloudflare) and secured at rest. Database access is strictly access-controlled and restricted solely to authorized infrastructure administrators.
  • Data Breach Notification: In the unlikely event of a severe data breach exposing personally identifiable information, Hubify will notify affected users and the relevant regulatory authorities within 72 hours (or as required by applicable state and international laws).
  • Standard Account Erasure: When you request account deletion, standard linked profile data (such as avatars, banners, and server listings) is permanently wiped from active databases within 30 days.
  • Safety & Moderation Retention: To prevent ban evasion, combat recurring fraud, and protect our community, Hubify retains specific core identifiers, specifically Discord IDs, Roblox Usernames, and active moderation action logs, even after an account deletion request. This data is retained strictly under our Legitimate Interest to enforce our Terms of Service and preserve network integrity.
  • Statutory Financial Records: In accordance with international tax, fiscal, and accounting regulations, transactional invoices and proof-of-purchase records for Hubify shop items are retained for up to 7 years.

Third-Party Integrations & External Communities

Hubify functions as an independent directory and is not affiliated with, sponsored by, or endorsed by Discord Inc. or Roblox Corporation.

  • External Links: Our site links to independent Discord servers, Roblox groups, and third-party websites. Once you navigate away from Hubify, your data is governed exclusively by the privacy terms and community guidelines of those external destinations.
  • International Transfers: By utilizing Hubify, users located outside the United States acknowledge that their information is routed, stored, and processed within servers situated in California, United States.
  • Legal Disclosures & Business Continuity: We may disclose account details if strictly required by lawful subpoena, search warrant, or emergency court order. If Hubify undergoes an organizational reorganization, platform merger, or domain transfer, user account registries may be transferred to the successor entity to guarantee continuity of service.

Conclusion

Hubify reserves the right to modify or amend this Privacy Policy to reflect technical updates, community features, or regulatory requirements. Any material adjustments will be posted to this page with an updated revision date. Continued access to the platform following notice of updates constitutes acceptance of the modified policy.

For any legal inquiries, data requests, or privacy questions, contact our Community Safety and Support team at [email protected].