Privacy Policy

BloxCore ("we", "us") is an unofficial, fan-made community site for Blox Fruits players. We are not affiliated with, endorsed by, or connected to Roblox Corporation or the developers of Blox Fruits. This policy explains what data we collect through bloxcores.com (the "Site") and how we use it.

1. Information We Collect

Account information. BloxCore accounts are created via "Sign in with Discord." We receive your Discord username, avatar, and a unique Discord ID from Discord as part of that sign-in. We do not receive or store your Discord password.

Roblox information. You may optionally add a Roblox username to your profile and verify ownership of it. Verification only confirms you control the account named — we do not access your Roblox password, inventory, or any other Roblox account data beyond what's publicly visible.

Profile content. Anything you choose to add to your profile — bio, social links, build/loadout selections, bounty figures, avatar — is stored and shown publicly on your profile page.

Content you post. Chat messages, direct messages, trade/service listings, combos, crew info, giveaway entries, reports, and any screenshots you upload as proof (for challenges or giveaways) are stored on our servers.

Reputation/vouches. If another user leaves a vouch (a thumbs up/down and optional short note) on your profile, that's stored and shown publicly on your profile. Vouches are not verified against an actual trade — treat the count as community feedback, not proof.

Push notification data. If you opt in to push notifications from Settings, your browser generates a device-specific subscription (an endpoint URL and encryption keys) that we store so we can deliver notifications to that device. We don't receive any other data about your device through this. You can disable push notifications at any time from Settings, which deletes the subscription.

Usage data. We use browser local storage to remember display preferences (theme, reduced motion, compact mode) on your device. We do not use third-party advertising trackers or sell data to ad networks.

2. How We Use Information

• To operate core features: profiles, chat, direct messages, trading, giveaways, crews, and leaderboards.
• To send you in-site notifications for things you've opted into (friend requests, messages, giveaway updates, etc.) — all configurable in Settings.
• To moderate the community: reviewing reports, challenge/giveaway proof screenshots, and enforcing our Terms of Service.
• To keep the Site secure and prevent abuse (spam, scams, exploited bugs used to harm other users).

3. What's Public vs. Private

Your username, display name, avatar, bio, bounty figures, build, reputation/vouches received, and any content you post to public areas (chat, trading, services, combos, crews, sea events, giveaways) is visible to anyone who visits the Site. Direct messages are only visible to you and the recipient — and to staff if a message is reported for review. Direct messages older than 7 days are automatically and permanently deleted; the conversation itself isn't deleted, only messages past that age. Push notification subscriptions are private to your account and never shown to other users.

4. Data Retention

• Direct messages: deleted automatically once they're older than 7 days.
• Trade and service listings, and sea event posts: deleted automatically once their chosen expiry time passes.
• Challenge and giveaway proof screenshots: retained for moderation and history purposes; screenshots tied to rejected or superseded submissions may be cleaned up periodically.
• If you delete your account, your profile and the content tied to it are removed, though content quoted or referenced by other users (e.g. a chat reply) may retain a reference to your former username.
• Vouches: kept until either party removes it, or staff removes it for abuse. Deleting your account removes vouches you've left and vouches others left on you.
• Push notification subscriptions: deleted immediately when you disable push notifications in Settings, when you delete your account, or automatically if your browser reports the subscription as no longer valid.

5. Third Parties

We use Discord for authentication and Supabase for hosting our database, file storage, and backend. We may also post public activity (new giveaways, trades, combos, etc.) to a public Discord webhook/channel as an announcement feed — this only includes content you've already posted publicly on the Site. If you enable push notifications, delivering them requires routing through your browser vendor's push relay service (e.g. Google, Mozilla, Apple) — this is a standard part of how web push works in every browser, and we don't share any additional data with them beyond what's needed to deliver the notification. We do not sell your data to advertisers or data brokers.

6. Your Choices

You can update or remove most profile information at any time from Edit Profile, control notification types from Settings, disable push notifications from Settings, remove a vouch you've left from someone's profile, and delete your account entirely from Settings. Deleting your account is permanent.

7. Children's Privacy

BloxCore is not intended for children under 13. If you believe a child under 13 has provided us with personal information, contact us and we'll remove it.

8. Changes to This Policy

We may update this policy as the Site evolves. Material changes will be noted on our What's New page.

9. Contact

Questions about this policy or your data can be sent to privacy@nexorealm.org.