This policy explains what information this site, run by Vienna Softworks (“we”, “us”), collects when you buy from us or use your account, and what we do with it. We collect only what we need to sell you a key and support you, and we don't sell your data.
What we collect
- Your email address, to deliver your key, sign you in, and reply to support tickets.
- Your Roblox account: your public username, user ID and avatar image, which you give us at checkout so we can verify your gamepass purchase.
- Order records: which tier you bought, when, and the key issued to you.
- Support tickets: the messages you send us and our replies.
- Your IP address, briefly, to limit repeated attempts and prevent abuse. It's kept for at most 15 minutes.
- Anonymous visit statistics: which pages are visited, the site or link that brought you here, your device type (phone, tablet or computer), your country, and which checkout steps you reach. To count unique visitors without cookies, we combine your IP address and browser details with a random value that changes every day and store only the scrambled result, never your IP address. That value can't identify you or link your visits across days, and these statistics are deleted after about 13 months.
Cookies
We use a single cookie to keep you signed in. It's essential for your account to work. We don't use advertising or analytics cookies, and we don't track you across other sites. Our visit statistics (above) are anonymous and don't use cookies.
Who we share it with
We only share data with the services we need to run the site:
- MongoDB Atlas, which stores our database.
- Resend, which sends our emails (sign-in links, keys and ticket updates).
- Roblox: we look up your public Roblox profile and check gamepass ownership using Roblox's APIs, including our own Roblox sales records to confirm your purchase.
- Our hosting provider, which runs the website.
We may also disclose information if the law requires it.
Where it's processed
We're based in New York, United States, and your information is processed and stored in the United States by us and the services listed above.
How long we keep it
We keep your account, orders and tickets for as long as your account exists, so you can always find your keys and past conversations. Sign-in links expire after 15 minutes and sessions after 30 days, and both are deleted automatically. You can ask us to delete your account at any time.
Your choices
You can ask us for a copy of your data, to correct it, or to delete your account and data. Email [email protected] from the address on your account. Deleting your account also removes your access to your keys through this site, so save them first.
Children
This site isn't meant for children under 13, and we don't knowingly collect personal information from them. You must be 13 or older to create an account or buy. If you believe a child under 13 has given us personal information, contact us and we'll delete it.
Security
Sign-in links and sessions are stored in hashed form, the sign-in cookie can't be read by scripts on the page, and the site is served over HTTPS. No system is perfectly secure, but we work to protect your information.
Changes
If we change this policy, we'll update the date at the top. For significant changes we'll let account holders know by email.
Contact
Questions or requests: [email protected]. See also our Terms of Sale.