Privacy Policy
Last updated November 12, 2026
Playbuilt is operated from Ontario, Canada. This policy explains what personal information we collect when you download or buy Playbuilt, what we do with it, and the choices you have. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), and give buyers in the EU and UK the rights their laws provide.
1. What we collect
| Information | When | Why |
|---|---|---|
| Your email address | Every download, free or paid | To send your download link and receipt, and to help with support and refunds |
| Which plan and template you chose | Every download | To send the right files and updates |
| Your marketing choice, with the date and time | When you tick or leave the optional box | To record consent, as Canada's anti-spam law requires |
| Order details from Stripe: email, country, order number, amount, tax | Paid orders | To deliver the kit, handle refunds and keep records the law requires |
| A sign-in cookie | When you sign in at playbuilt.dev/account | To keep you signed in for up to 30 days |
| Bot-check signals from your browser (Cloudflare Turnstile) | When you use the download or sign-in form | To stop automated abuse of the forms |
| Messages you send us | When you email support | To answer you |
| When you download a paid kit, how many times, and your confirmation that downloading ends the refund | Paid downloads | To apply the refund policy |
| Your email and order number, written into LICENSED-TO.txt in each download | Every download | To show who a copy is licensed to |
| Basic server logs: IP address, browser, pages visited | When you visit the site | To keep the site running and secure |
We never see your card number; Stripe handles payment.
2. What we don't collect
Playbuilt runs on your own computer. We don't receive your games, your code, your prompts, your Claude conversations or your Roblox account details. The Playbuilt downloads don't send us any information. The full kit's trend scout reads Roblox's public discovery charts directly from Roblox and sends nothing to us.
The website doesn't use advertising cookies or cross-site trackers. It sets one cookie, only when you sign in, to keep you signed in. If we add analytics, we'll update this policy first.
3. Emails
- Receipts and download emails go to everyone who downloads or buys. They're part of the service, not marketing.
- Marketing emails, such as product updates and upgrade offers, go to you only if you ticked the optional box, or for up to two years after a paid purchase, as Canada's Anti-Spam Legislation (CASL) allows.
- Every marketing email names Playbuilt, gives our contact address and has an unsubscribe link that works within 10 business days. You can also email support@playbuilt.dev to stop them.
4. Who we share it with
We don't sell or rent your personal information. We share it only with services that help us run Playbuilt, and only what they need:
- Stripe and Link, the merchant of record for paid orders: payments, tax, receipts and payment support. See Stripe's and Link's privacy policies for how they handle your data.
- Resend, our email service, to send download and sign-in emails and, if you agreed, marketing emails.
- Cloudflare, which hosts the website, stores the downloads and our order records, keeps server logs and runs the bot check.
We may also disclose information when the law requires it, or to protect our rights in a legal dispute.
5. Where it is stored
Our service providers may store and process your information outside your country, including in the United States. There it may be accessible to authorities under local law. We choose providers that protect personal information to a standard comparable to Canadian law.
6. How long we keep it
- Order records: as long as tax and accounting laws require, generally six years in Canada.
- Your email for downloads and support: until you ask us to delete it, or two years after your last download or purchase.
- Marketing consent records: as long as we email you, plus the period CASL needs us to prove consent.
- Sign-in links: 30 minutes. Sign-in sessions: 30 days.
- Server logs: up to 90 days.
7. Your rights
You can ask to see the personal information we hold about you, correct it, or delete it, and you can withdraw consent to marketing at any time. Email support@playbuilt.dev; we reply within 30 days.
If you're in the EU or UK, you can also object to how we use your information, ask us to restrict it, and ask for a copy in a portable format. We rely on the contract with you to deliver downloads, on your consent for marketing you opted into, on our legitimate interest in keeping the site secure, and on legal obligations for tax records.
If you're not happy with our answer, you can complain to the Office of the Privacy Commissioner of Canada, or to the data protection authority where you live.
8. Security
We use reputable providers, keep access to your information to what's needed, and use encrypted connections. No system is perfectly secure; if a breach puts you at real risk, we'll tell you and the regulators the law requires us to.
9. Age
Playbuilt is for people 18 and older. We don't knowingly collect information from anyone younger. If you believe someone under 18 gave us their email, contact us and we'll delete it.
10. Changes
We'll update the date at the top when this policy changes, and email you about important changes if we have your email.
11. Contact
Privacy questions and requests: support@playbuilt.dev.