Rysk policies
Privacy policy
This notice explains the data Rysk uses to run accounts, the Roblox game, the virtual economy, and the website.
Last updated: 12 July 2026
Who this applies to
This policy applies when you use the Rysk website, dashboard, catalog, market, or connected Roblox game. Rysk is an independent community project and is not affiliated with Roblox Corporation.
Account and security data
When you create or use an account, Rysk stores your account username, a bcrypt password hash, account role and permissions, account timestamps, and the most recent IP address and user-agent supplied to the service. We use this information to sign you in, protect the service, investigate abuse, and administer accounts. We do not store your password in readable form.
Roblox account data
If you link a Roblox account, Rysk stores the Roblox account ID, Roblox username, and the time the link was made. The Roblox OAuth flow is used to verify the link. Rysk does not store the OAuth access token obtained during that verification flow. Roblox usernames may also be used to retrieve public avatar and item-thumbnail images.
Economy, activity, and mailbox records
To run the game, Rysk records virtual cash and cases, inventory items and serials, equipped items, settings, game statistics, item-transfer history, market listings, trades, and game-round records. Game-round records can include participants, stakes, outcomes, and fairness-verification material. If administration assigns you a Rysk mailbox, we also store its address, quota, status, and the messages and technical delivery data held in that mailbox. These records are used to operate the service, resolve technical issues, prevent duplicate payouts, and investigate fraud or exploits.
What other players can see
The catalog can show item serials, current owners, ownership history, and active resellers. Profiles, live-game views, and completed history can show Roblox usernames, public Roblox avatars, inventory or item ownership, and game or trade activity where those features are enabled. Your dashboard account username, password hash, IP address, device information, internal numeric ID, and private settings are not published. The anonymous setting is intended to limit username display in the relevant live and recent-history views; it is not a guarantee that activity cannot be linked through other public item or game records.
Cookies and anti-abuse services
Rysk uses authentication cookies to keep you signed in and a short-lived cookie during Roblox account linking to verify the OAuth response. Login and registration use Cloudflare Turnstile. Turnstile is a third-party anti-abuse service and receives the information needed to perform its challenge. Rysk also uses Roblox and RoProxy endpoints to resolve public Roblox usernames, avatars, and item images.
Service providers and disclosures
Rysk does not sell personal information. Data is processed by the infrastructure and service providers needed to host the website and API, deliver anti-abuse checks, and retrieve public Roblox information. We may disclose relevant records where reasonably necessary to protect Rysk, enforce these terms, investigate abuse, or comply with a valid legal obligation.
Retention and security
We keep account, security, and economy records for as long as they are reasonably needed to operate Rysk, maintain reliable ownership and transaction records, prevent abuse, and meet legal obligations. Access is restricted to authorised administration functions, but no online service can promise absolute security.
Your choices and requests
You can manage available gameplay and privacy settings in the dashboard, including trade preferences. To ask about access, correction, deletion, or another privacy request, contact the Rysk administration team through an official Rysk support channel. Requests may be limited where data must be retained for security, transaction integrity, legal obligations, or the rights of other players.
Changes to this policy
Rysk may update this policy when the service or its data practices change. The date above shows the latest version. Continuing to use Rysk after an update means you acknowledge the revised policy.
