Last updated October 15, 2026

Privacy Policy

This explains what Perforance collects, why, who we share it with and the choices you have. We don't sell your personal information, and we don't use it for advertising.

Who we are

Perforance ("we", "us") runs perforance.net and its subdomains, the Perforance One group-management service, the Perforance API used by Roblox games, and the Perforance Discord bot. For anything about your data, email legal@perforance.net.

What we collect

When you visit perforance.net

• Analytics, only if you allow it. If you click Accept on the cookie banner, Google Analytics records pages viewed, how you arrived (for example, a link or search), your approximate location (country and city), device and browser type, and session timing. Google Analytics doesn't store your IP address. If you click Reject, or your browser sends a Global Privacy Control signal, Google Analytics never loads.
• Server logs. Our hosting provider keeps short-lived request logs, including IP addresses, to run and protect the service.

When you use Perforance One

• Your Roblox account (through Roblox sign-in): Roblox user ID, username, display name and profile picture link. We never see your Roblox password.
• Your groups: the Roblox groups you own, and the name, icon and ranks of the group you set up. We also keep the permission sets and rank settings you create.
• Billing: your plan, subscription status and billing reference IDs. Card details go straight to our payment processor. We never see or store your card number.
• Sign-in records: for security, the IP address, approximate location (worked out from the IP address) and browser of each sign-in. We delete these after 180 days.

When you link Discord or buy a product in a Roblox game

• Your Roblox user ID, your Discord user ID, username, display name and avatar (when you run /link), and records of products you buy or claim (product, price and Roblox receipt ID), so we can deliver the product file to you on Discord.

Cookies and similar storage

• Strictly necessary: sign-in cookies on our portals (for example __Host-pf_onboarding). They hold a random session ID, last up to 12 hours and are deleted when you sign out. Your cookie choice is saved in your browser's local storage under pf-consent.
• Analytics (only with consent): Google Analytics cookies _ga and _ga_*, kept for up to 13 months.

You can change your mind at any time with Cookie settings. Rejecting deletes the analytics cookies.

Why we use it (legal bases)

• To provide the service you asked for (contract): signing you in, setting up your group, delivering products and billing your subscription.
• To keep things secure and working (legitimate interests): sign-in records, abuse and fraud prevention, and fixing problems.
• Analytics (consent): only after you accept, and you can withdraw consent at any time.
• To meet legal duties (legal obligation): for example, keeping tax and payment records.

Who we share it with

We use trusted service providers to run Perforance. Each one handles data only to provide its service to us, under contract:

• cloud hosting and database providers;
• a payment processor;
• an email provider;
• Google Analytics, only with your consent.

Roblox and Discord receive information when you use them with Perforance, for example when you sign in with Roblox or we send you a product on Discord. Their own privacy policies apply.

We may also share information if the law requires it, or to protect people or the service from harm. If Perforance is sold or merged, your information would pass to the new owner under this policy.

International transfers

Some providers process data outside your country, including in the United States. When data leaves the EU, EEA, UK or Switzerland, we use legally approved safeguards, such as the European Commission's Standard Contractual Clauses or a provider's certification under the EU–US Data Privacy Framework.

How long we keep it

• Sign-in records: 180 days.
• Sign-in sessions: up to 12 hours.
• Analytics: up to 14 months.
• Account and group data: until you ask us to delete it.
• Billing records: as long as tax law requires.

How we protect it

Every connection to Perforance is encrypted with HTTPS (TLS), and browsers are told to always use it. Our database provider encrypts stored data. Passwords are stored only as salted scrypt hashes. Sign-in cookies are HttpOnly, Secure and SameSite=Strict, and we store only a hash of each session ID. API keys and service secrets live in encrypted environment settings, never in our code. Sign-in with Roblox uses OAuth with PKCE, and we don't keep your Roblox access token after sign-in. No system is perfectly secure. If we learn of a breach that affects you, we'll tell you and the authorities as the law requires.

Your rights

Depending on where you live (including under the EU and UK GDPR, and California and other US state laws), you can ask us to:

• see the personal information we hold about you, or get a copy you can take elsewhere;
• correct it;
• delete it;
• restrict or object to how we use it;
• withdraw your consent to analytics at any time.

Email legal@perforance.net and we'll reply within 30 days. We'll never treat you differently for using these rights. We don't sell or "share" personal information for cross-context behavioural advertising, and we honour Global Privacy Control. If you're in the EU, EEA or UK, you can also complain to your local data protection authority.

Group owners and their staff

When you set up a group on Perforance One, you decide which people and information it includes. For that staff data, you're the controller and we process it for you, following your instructions and this policy.

Children

Perforance One is for people aged 13 or older, or older where local law sets a higher age for consenting online without a parent (for example, 16 in some EU countries). We don't knowingly collect information from children below these ages. If you think a child has given us information, email legal@perforance.net and we'll delete it.

Changes

If we change this policy, we'll update the date above. For significant changes, we'll also tell signed-in customers.