Privacy policy

appea.ls is responsible for your data. For anything about your privacy, email [email protected].

Only what we need to run the service:

• Account: your name, email address and a securely hashed password (we never store your password itself), the age group you choose at sign-up, and when you accepted these terms. If you sign in with Google or Discord, they send us your name, email address, profile picture link and an ID for that account (never your password). We don't keep the sign-in tokens they send. If you add a passkey, we store its public key and a label for it; your fingerprint, face or PIN never leaves your device.
• Cases: the Roblox username, the appeals the bot sent and Roblox's answers, the case timeline, your private case notes, your "Did it work?" answers and the after-unban checklist you tick off. Each case gets its own email address, which Roblox uses to send the bot the one-time code it needs to submit an appeal. The bot reads those codes and nothing else.
• Ban screenshots: if you're not sure which kind of ban you have and upload a screenshot, we run it through a safety check, read it, and delete it straight away. We don't store it.
• Payments: the plan, amount, status and Square or OxaPay reference numbers. Card details go straight to Square and cryptocurrency payments to OxaPay; neither touches our servers.
• Invites and gifts: who invited whom, the bonus days you earn, gift codes and any note you add to a gift.
• Security: sign-in events, devices and their IP addresses and browser details, so we can spot break-ins and show you where you're signed in. If you turn on two-step sign-in, the authenticator key and backup codes are stored encrypted.
• Support messages: what you send through the contact form (name, email, topic and message), kept in our support inbox and emailed to our support team.
• Error reports: if something breaks, an error message goes to our private operations alert channel so we can fix it. We keep these short and leave out request details.

Passwords, two-factor codes, recovery codes or session cookies for any platform account. There's nowhere in appea.ls to enter them, and our forms try to catch and refuse text that looks like a password or code.

To run your case and your account, and nothing else:

• Submitting your appeals, tracking Roblox's answers and telling you when something changes.
• Sending emails you need: confirming your address, password resets, security alerts and case updates.
• Taking payments, adding the time you paid for and handling refunds.
• Keeping appea.ls secure: rate limits, lockouts after failed sign-ins and spotting abuse.
• Answering your support messages.

We use your details to run your account and your cases because that's the service you asked for (a contract). We use security logs and abuse checks because keeping appea.ls safe is in everyone's interest (legitimate interests). Where we ask for your consent, like case emails, you can take it back at any time in Settings.

We don't sell your data, and there are no advertising or analytics trackers on appea.ls. We share the minimum needed with the services that help us run it:

• Square, to take card payments, and OxaPay, to take crypto payments.
• Our email provider (ZeptoMail), to deliver emails.
• Our appeal bot, which receives the Roblox username and the case's email address so it can submit the appeal.
• OpenAI and api.navy, only if you upload a ban screenshot. OpenAI's moderation service checks the image is safe first. If our own text reader can't find the ban note in it, a vision model on api.navy reads the image instead. Neither is sent anything else about you, and we delete the image as soon as the check is done.
• Google or Discord, only if you choose to sign in with them. They see that you signed in to appea.ls.
• Roblox, which receives the username you type when we look up the public profile. We don't send Roblox anything about you. Avatar pictures are loaded by your browser straight from Roblox's image servers, so Roblox sees your IP address when they load.
• Our hosting and database providers, who store the data for us.
• Authorities, only if the law requires it.

Square, OxaPay, ZeptoMail, OpenAI and api.navy may handle some of your data outside your country, including in the US. We only use providers that commit to protecting it, using standard contract terms where the law asks for them.

We don't use advertising, analytics or tracking cookies. The ones we do use are all needed for the feature they belong to:

• A sign-in cookie that keeps you signed in. It can't be read by scripts on the page.
• If you untick "keep me signed in", a cookie (appeals.dont_remember) that tells us to end your session when you close the browser.
• Two-step sign-in: a short-lived cookie while you enter your code (10 minutes), and, only if you tick "trust this device", one that skips the code on that device for 30 days.
• Google, Discord and passkey sign-in: a short-lived cookie (up to 10 minutes) that makes sure the sign-in you finish is the one you started here.
• An age-check cookie, set only if someone says they're under 13 at sign-up, so the form can't just be retried. It lasts a day.

Your cases stay until you delete them or your account. Roblox profile lookups aren't stored; we keep the username you entered and nothing else from the profile. Security logs are deleted after 180 days. Messages you send us (your name, email and message) stay in our support inbox while we help you, and are deleted 2 years after we close them, even if you delete your account first. Ask us and we'll delete them sooner.

Deleting a case removes the case and everything in it.

When you delete your account, your profile, cases, sign-in methods, bonus days and notifications are deleted, any subscription is cancelled and the appeals stop. Payment records are kept without your name or email, because tax law requires it. Security logs (sign-in events with their IP address and browser details) are kept, with your account and email removed, until they reach 180 days old, to help investigate abuse. Square and OxaPay keep their own payment records as the law requires.

In Settings you can change your name, email and password, turn on two-step sign-in, turn case emails off, download a copy of all your data, sign out other devices, or delete your account, all without asking us.

Depending on where you live, you also have the rights below. To use any of them, email [email protected] and we'll reply within 30 days.

• see the data we hold about you (access)
• have it corrected (correction)
• have it deleted (deletion)
• ask us to limit how we use it (restriction)
• get a copy to take elsewhere (portability)
• object to how we use it (objection)
• complain to your data protection authority

appea.ls isn't for children under 13 and we don't knowingly collect their data. If you're a parent and think your child under 13 has signed up, email us and we'll delete the account. Teens aged 13 to 17 should use appea.ls with a parent or guardian's permission.

Ban screenshots are never stored. Every case is checked against your account on every request. Our security page has more detail.

If we change this policy in a way that matters, we'll update the date at the top and let you know before it applies.