Privacy Policy

Last Updated: May 21, 2026

1. Introduction

We are Coffee Stain GBG AB, a company incorporated and registered in Sweden with its registered address at Hertig Johans Gata 6, 541 40 Skövde, Sweden, and organisation number 559105-9208 (“Coffee Stain GBG”, “we”, “us” or “our”). We are a video game development studio.

Where we decide the means or purpose of processing your personal data, we are the “data controller” in accordance with the EU General Data Protection Regulation (GDPR).

This Privacy Policy explains how we collect, store, use, transfer and disclose your personal data when you:

  • visit our website (the “Website”);

  • access or play our game “Welcome to Bloxburg” on the Roblox platform (the “Game”); and/or

  • use our feedback and player support services.

The Website and the Game are collectively referred to as the “Properties”.

Important: The Game is hosted on the Roblox platform. When you play the Game, Roblox Corporation (“Roblox”) collects and processes certain personal data in accordance with its own privacy policy, available at https://en.help.roblox.com/hc/en-us/articles/115004630823-Roblox-Privacy-Policy

We do not control and are not responsible for the personal data processing carried out by Roblox. We encourage you to review the Roblox Privacy Policy to understand how your data is handled on that platform.

We may update this Privacy Policy from time to time. The latest version is always available on our Website. Where appropriate, we will actively notify you of material changes.

2. Personal Data Controller

Coffee Stain GBG AB
Hertig Johans Gata 6
541 40 Skövde, Sweden
Organisation number: 559105-9208
Contact: gbg@coffeestain.se

3. The Data We Collect and How We Use It

Below, we describe the categories of personal data we collect, the purposes of processing, and the legal bases we rely on. Personal data means any information that can identify you, directly or indirectly, such as your name, email address, online identifiers or location data.

3.1 In-Game Data (Roblox Platform)

When you play Welcome to Bloxburg, certain data is collected and processed by Roblox in its capacity as data controller. This includes your Roblox user ID, display name, in-game activity and other data as described in the Roblox Privacy Policy. We may access limited data made available to us through the Roblox platform APIs, such as your Roblox user ID and display name, for the purpose of providing the Game’s features and functionality. Our legal basis for this processing is the performance of a contract (Art. 6(1)(b) GDPR) and our legitimate interest in operating and improving the Game (Art. 6(1)(f) GDPR).

3.2 Website Data

Our Website may collect certain technical data when you visit it, including:

  • Browser type and settings

  • IP address and approximate location

  • Device type and operating system

  • Pages visited, links clicked and time spent on the Website

  • Referring website

We process this data to ensure the Website functions properly, to improve your experience, and to monitor and analyse usage patterns. Our legal basis for this processing is our legitimate interest in maintaining and improving the Website (Art. 6(1)(f) GDPR).

3.3 Feedback and Player Support (BetaHub)

We use BetaHub, a third-party service, to manage feedback submissions and player support reports. When you submit a report or feedback through BetaHub, the following personal data may be collected:

  • Email address

  • Username or display name

  • Any other information you voluntarily include in your submission (such as descriptions, screenshots or technical details)

BetaHub acts as a data processor on our behalf in accordance with its own privacy policy, available at https://betahub.io/privacy/ . We process this data for the purpose of receiving, reviewing and responding to your feedback and support requests. Our legal basis for this processing is our legitimate interest in providing player support and improving the Game (Art. 6(1)(f) GDPR), and where applicable, the performance of a contract (Art. 6(1)(b) GDPR).

3.4 Email Communication

When you contact us by email, we process the personal data contained in your message so that we can reply to and handle your request. The processing is based on our legitimate interest in managing incoming communication (Art. 6(1)(f) GDPR). We retain the information only for as long as it is needed to address your inquiry. In some cases, we may keep correspondence longer if required to protect our legal rights or to comply with applicable laws.

4. Summary of Data Processing

The following is a summary of the categories of personal data we process, the purposes of processing, and the legal bases we rely on.

In-Game Identity Data

Description: Roblox user ID, display name.
Purpose: To provide and operate the Game and its features.
Legal Basis: Performance of a contract (Art. 6(1)(b) GDPR); Legitimate interest (Art. 6(1)(f) GDPR).

Website Technical Data

Description: IP address, browser type, device information, pages visited.
Purpose: To maintain the Website, analyse usage and improve user experience.
Legal Basis: Legitimate interest (Art. 6(1)(f) GDPR).

Support and Feedback Data

Description: Email, username, description of issue, screenshots and other voluntarily provided data.
Purpose: To receive, review and respond to feedback and support requests.
Legal Basis: Legitimate interest (Art. 6(1)(f) GDPR); Performance of a contract (Art. 6(1)(b) GDPR).

Contact Data

Description: Email address and any information included in your message.
Purpose: To respond to and manage incoming inquiries.
Legal Basis: Legitimate interest (Art. 6(1)(f) GDPR).

5. Third-Party Services and Data Processors

We may use external service providers who act as data processors on our behalf. These processors only process personal data in accordance with our instructions and are contractually bound to maintain appropriate data protection standards.

Our key third-party service providers include:

  • Roblox Corporation – As the platform hosting the Game, Roblox acts as an independent data controller for personal data it collects through its platform. Please refer to the Roblox Privacy Policy for details.

  • BetaHub – Acts as our data processor for managing feedback and player support submissions. BetaHub processes personal data on our behalf in accordance with our data processing agreement.

We may also share your personal data with other members of our corporate group (Coffee Stain Holdings and affiliated entities), or where required by law, government authorities, competent courts, or to establish, exercise or defend our legal rights.

6. Transfers to Countries Outside the EU and EEA

Our external service providers may process your personal data outside the EU/EEA on our behalf. Where such transfers take place, we ensure that appropriate safeguards are in place in accordance with the GDPR, such as Standard Contractual Clauses approved by the European Commission or adequacy decisions. We have taken, and continue to take, appropriate measures to ensure that any recipient of personal data outside the EU/EEA provides an adequate level of protection.

7. Data Retention and Deletion

We will not retain personal data for longer than is necessary for the purposes outlined in this Privacy Policy. Specifically:

  • In-game data accessed through the Roblox platform is retained in accordance with Roblox’s own data retention policies.

  • Feedback and support data processed through BetaHub is retained for as long as necessary to resolve your inquiry, and for a reasonable period thereafter for quality assurance and legal compliance.

  • Website technical data is retained only for as long as needed for security and analytical purposes.

  • Email correspondence is retained for as long as necessary to address the inquiry, and may be kept longer where required for legal or compliance purposes.

We may still retain information where we have a continuing legitimate interest, for example to resolve disputes, enforce our terms of use, or comply with legal requirements.

8. Keeping Your Data Safe

We implement appropriate technical and organisational measures to ensure that your personal data is collected, processed and stored as securely as possible. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. We encourage you to take care when sharing your information online.

9. Children

We recognise that Welcome to Bloxburg may be played by users of all ages, including children. The Game is hosted on the Roblox platform, which has its own age verification, parental controls and child safety measures. Please refer to the Roblox Privacy Policy for information on how Roblox handles data relating to children.

With respect to data we collect directly (such as through our Website or BetaHub), we do not knowingly collect personal data from children under the age of 13. If you are a parent or guardian and believe that your child under the age of 13 has provided personal data to us directly, please contact us using the details below, and we will take reasonable steps to delete such data from our systems.

10. Your Rights

Under the GDPR, you have the following rights in relation to your personal data:

  • Right of Access – You have the right to request information about what personal data we process about you.

  • Right of Rectification – You have the right to request that inaccurate personal data concerning you be corrected.

  • Right to Erasure – You have the right to request the deletion of your personal data (the “right to be forgotten”).

  • Right to Restriction of Processing – You have the right to request that we temporarily or permanently cease processing some or all of your personal data.

  • Right to Data Portability – You have the right to receive your personal data in a structured, commonly used and machine-readable format.

  • Right to Object – You have the right to object to our processing of your personal data, including for direct marketing purposes.

  • Right to Withdraw Consent – Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before the withdrawal.

  • Right to Lodge a Complaint – You have the right to lodge a complaint with a supervisory authority. In Sweden, the relevant authority is the Swedish Authority for Privacy Protection (IMY): https://www.imy.se/

To exercise any of your rights, please contact us at the address provided below. Please note that we may need to verify your identity before processing your request, and that in certain circumstances we may not be able to fully comply with your request, for example where we are under a legal obligation to retain the data. If so, we will provide you with an explanation.

For personal data processed by Roblox, please contact Roblox directly in accordance with their privacy policy.

11. How to Contact Us

Coffee Stain GBG AB
Hertig Johans Gata 6
541 40 Skövde, Sweden
Email: gbg@coffeestain.se

If we cannot resolve your concern, you may also contact the Swedish Authority for Privacy Protection (IMY):

Phone: +46 (0)8 657 61 00
Mail: Integritetsskyddsmyndigheten, Box 8114, 104 20 Stockholm
Email: imy@imy.se
Website: https://www.imy.se/