Privacy Policy

Last updated: May 26, 2026

1. Data Controller

ERPSearcher and its operators ("we," "us," "our") are the data controller responsible for your personal data as described in this Privacy Policy. For any data protection inquiries, contact us at [email protected].

2. Information We Collect

We collect the following categories of information when you use ERPSearcher:

Account Information

  • Email address (used for authentication via magic link)
  • Username (automatically derived from your email) and avatar (generated via Gravatar)
  • Account role and status within ERPSearcher
  • For legacy accounts that previously used Discord authentication: Discord User ID, username, email, and avatar URL may still be stored

API & Usage Data

  • API keys issued to your account
  • API request logs (timestamps, player IDs checked, detection results)
  • Player lookup queries and results
  • Rate limit and quota usage

Roblox Player Data

  • Roblox User IDs submitted through API requests or player lookups
  • Roblox usernames resolved from submitted User IDs
  • Detection results associated with queried players (flagged/clean status)
  • Moderation notes attached to flagged accounts

Technical Data

  • IP addresses (for security, rate limiting, and abuse prevention)
  • Browser user agent and session identifiers
  • Cloudflare headers used for bot protection and security checks

Support Data

  • Support ticket content and messages submitted through our ticket system

3. How We Use Your Information

  • Provide, operate, and maintain the ERP detection service
  • Authenticate your identity and manage your account
  • Process API requests and return detection results
  • Monitor for abuse, enforce rate limits, and maintain service integrity
  • Respond to support requests and communicate service updates
  • Generate aggregate analytics to improve detection accuracy and service quality
  • Enforce our Terms of Service

4. Legal Basis for Processing

We process your personal data under the following legal bases (where applicable under GDPR or similar regulations):

  • Contract performance: Processing necessary to provide the Service you signed up for, including account management, API access, and detection results
  • Legitimate interest: Processing necessary for service security, abuse prevention, rate limiting, and service improvement - balanced against your rights and reasonable expectations as a user of a moderation tool
  • Legal obligation: Processing required to comply with applicable laws, regulations, or legal processes
  • Consent: Where you have given explicit consent for a specific processing activity. You may withdraw consent at any time by contacting us

5. Roblox Player Data Processing

When API users submit Roblox User IDs for checking, we process this data solely for the purpose of returning detection results. Player data in our database is sourced from community reports and internal detection systems. We do not collect data directly from Roblox players - all data flows through our API users who have integrated the service into their Roblox experiences.

Roblox players whose data is stored in our system are not direct users of ERPSearcher. If you are a Roblox player and believe your data is stored in our system inaccurately, please email us at [email protected].

6. Data Storage & Security

Your data is stored in databases with access restricted to authorized personnel only. We use encryption in transit (TLS) and access controls to protect your information from unauthorized access, alteration, or destruction.

API keys are generated server-side and stored in our database. They are visible to you through your authenticated dashboard session. You are solely responsible for keeping your API keys confidential and should treat them as sensitive credentials.

7. Data Sharing

We do not sell, trade, rent, or share your personal information with third parties for marketing purposes. Your data may only be disclosed in the following circumstances:

  • When required by law, regulation, legal process, or governmental request
  • To protect the rights, safety, or property of ERPSearcher, our users, or the public
  • To enforce our Terms of Service or investigate potential violations
  • With service providers who assist in operating the Service (e.g., hosting providers), bound by confidentiality obligations

8. Data Retention

  • Account data: Retained as long as your account remains active. You may request deletion by emailing [email protected]
  • API usage logs: Retained as long as necessary for service operation and abuse prevention
  • Detection/player data: Retained indefinitely as part of the detection database to maintain service accuracy
  • Support tickets: Retained for the lifetime of your account
  • IP addresses & login history: Retained as part of your account's security log for abuse prevention

9. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request correction of inaccurate personal data
  • Deletion: Request deletion of your personal data (subject to legal retention requirements)
  • Portability: Request your data in a portable, machine-readable format
  • Objection: Object to certain processing of your personal data
  • Complaint: Lodge a complaint with your local data protection supervisory authority if you believe your rights have been violated

We do not sell or share your personal information for cross-context behavioral advertising. As such, there is no need to opt out of the "sale" or "sharing" of personal data under the CCPA/CPRA.

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

10. Automated Decision-Making

The Service may use automated systems to check whether a player account is flagged in our database. All entries in the detection database require human approval before being added - no account is flagged by automation alone. If you believe your Roblox account was incorrectly flagged in the EASI detection database, you may submit an appeal as described on our EASI Ban Appeal page. Appeals are submitted by email to the address listed there and should include your Roblox User ID and your explanation.

11. Children's Privacy

ERPSearcher requires users to be at least 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13 without verifiable parental consent, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please email us immediately at [email protected].

12. Cookies & Session Data

We use essential session cookies to maintain your authentication state and provide core functionality. These cookies are strictly necessary for the Service to operate and cannot be disabled while using the Service. We do not use advertising, tracking, or third-party analytics cookies.

13. Third-Party Services

The Service integrates with the following third-party platforms:

14. Data Breach Notification

In the event of a data breach that compromises your personal information, we will notify affected users through the platform (e.g., system banner, email, or dashboard notification) within 72 hours of becoming aware of the breach, where feasible. We will also notify relevant authorities as required by applicable law.

15. Changes to This Policy

We may update this Privacy Policy at any time. Material changes will be communicated through the platform. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy. We encourage you to review this page periodically.

16. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, please email us at [email protected].