Privacy Policy
Last updated 4 October 2026
What we collect, why we hold it, and who can see it - in plain language, with nothing hidden in a clause. If a line here doesn't match what the site actually does, that's a bug. Tell us.
01Who this covers
RO. Nation LIVE runs live shows, showcases and tournaments inside Roblox. This policy explains what we collect when you use our websites, why we hold it, who can see it, and how to get it changed or removed.
It applies to everything we operate - not just the main site:
- ronation.live - the public site, tickets, blog, careers and your account.
- portal.ronation.live - the staff and partner portals, used by our crews.
- survey.ronation.live - surveys, answered with a Roblox sign-in.
- merch.ronation.live - the shop, which is a showcase that hands off to Roblox. See our Merch & Refunds policy.
- authorise.ronation.live - the sign-in host. It exists only for the round trip out to Roblox and back.
- accounts.ronation.live and pay.ronation.live - the payment system: the documents we raise, and the statements a partner or contractor reads. How that works is set out in Payments & Payouts.
- Partner sites on our subdomains (for example sleeptokenro.ronation.live). We host and operate these; a partner's own crew writes the content. Data collected there is held by us, under this policy.
02We are not Roblox
We are an independent event group. We are not affiliated with, endorsed by, or operated by Roblox Corporation.
What you do inside Roblox itself is governed by Roblox's own privacy policy and terms. For our events, Roblox and our experience servers also send us the identity, purchase and ticket-verification information needed to run the service; we receive what you type into our forms as well.
03Age
You must be 13 or over to sign in here, reserve a ticket, apply for a role or answer a survey. We cannot verify anybody's age, so this is a rule you agree to rather than a gate we can enforce.
If you are under 13, please don't create an account with us. You can still come to the shows - they happen inside Roblox, and attending one is governed by Roblox's rules and by whatever your parent or guardian allows there.
If we learn that an account here belongs to someone under 13, we delete it and the tickets attached to it.
04What we collect
The app processes these categories of information, depending on which features you use:
- Your Roblox identity, when you sign in. Roblox hands us your user ID, username, display name and avatar picture. We never see your Roblox password.
- Your tickets - which event, a unique ticket code, which tier, and the timestamps for when you accepted the ticket terms, when you activated it, and when you were checked in at the door.
- An optional email address you enter at ticket checkout for a reservation confirmation. It is stored on the ticket and, when email delivery is configured, sent to our email provider for that confirmation; it is not a mailing-list sign-up.
- Seat choices, purchase intents, event follows, waitlist places and in-site notifications, including when you viewed a notification, where you use those features.
- A Discord link, if you connect Discord by OAuth or bot code: Discord user ID, display name and link timestamps. See our Discord connection privacy policy.
- Crew applications - the Roblox username, Discord handle, timezone, portfolio link and message you type into the form, plus the status we later set on it (New, Reviewing, Accepted, Rejected).
- Survey answers and any files you upload for a survey question, tied to your Roblox account so we can limit responses and show results to the authorised event crew.
- VIP list and blacklist entries - if you are added to either, we hold your Roblox ID, username, display name, avatar, the reason recorded, who added you, and when. Changes are kept as an append-only history.
- Images uploaded by staff or partner crews, and files that respondents upload to survey questions, with uploader, filename and file details.
- A Roblox permission grant, but only if you have given us one. Sign-in itself asks for nothing beyond your public profile. If you ever reach a paid checkout on a tier that is sold as a Roblox game pass, we ask separately for permission to check whether you own that pass - and if you agree, we store the access token, the refresh token and the list of permissions you actually granted, so we can make that one check. It can read nothing else, and it cannot spend, change or post anything.
- Purchase records, where a ticket was paid for on Roblox. That is Roblox's own purchase ID, the Robux the sale reported, and which Roblox place and product it happened in - the record that stops you being charged twice for the same thing.
- Accounting records, if we do business with you as a partner, contractor or supplier. The name we raise documents against, any note we keep about the arrangement, the Roblox accounts we have granted access to your statements, every document raised with you and what is on it, and the payment requests you send us. See Payments & Payouts.
- Enquiries, data requests, partner applications and site briefs you send through our forms, including the contact details and files you provide.
- Staff and partner access records, role grants and audit history, including which authorised account made a change and when.
- Server and security logs, which may include IP address, browser user-agent and timestamps, for service protection and debugging.
- Session, sign-in, language and portal activity cookies. See our Cookie Notice.
05What we don't collect
It is worth being just as specific about this.
- No passwords. Sign-in happens at Roblox; we never see or hold your credentials.
- No card or bank details through our ticket and merchandise flows. A website checkout may help you select a paid ticket and confirm a Roblox game pass, but Roblox processes the Robux purchase. Payout requests on our site do not transfer Robux by themselves.
- No Robux balance. We cannot see how much Robux you have, and the permission a paid checkout asks for cannot spend any.
- No advertising or analytics trackers. No third-party tracking cookies, no ad pixels, nothing sold or handed to data brokers.
- No message content from Roblox or Discord. We cannot read your chats.
- Roblox sign-in does not give us your email address or date of birth. You may choose to give us an email address at ticket checkout, in an enquiry, data request, partner application or another form.
07Why we hold it
Each purpose is tied to something the service actually has to do:
- Running ticketing - confirming who you are, showing you your tickets, verifying them at the door inside the Roblox experience, and keeping a venue to its capacity.
- Reviewing crew applications, and getting back to you about them.
- Running surveys, and keeping them to one response per person.
- Keeping events safe - the blacklist exists so that somebody removed from a show for harming others can be kept out of the next one.
- Recognising VIPs and guests at the door.
- Security and abuse prevention: spotting exploit attempts against ticket verification, and keeping a change history so an action can be traced to whoever took it.
- When the game-pass checkout is enabled, checking with Roblox that you own the pass for the ticket tier before issuing it.
- Keeping the books: raising documents, paying partners and contractors what they are owed, matching payments to them, and keeping the record of it. We are obliged to keep accurate financial records, and we do.
- Aggregate, non-identifying figures - how many people came - to plan future shows.
08The blacklist and the VIP list
These get their own section, because they are the most sensitive thing we hold.
If you are added to either list, we record who added you, when, and a short reason. The entry and its history are visible to the crew of the organisation holding that list - our staff for ours, a partner's crew for theirs - and to senior RO. Nation LIVE staff.
They are used to manage event access and review safety decisions. They are not published or shared for marketing; authorised crew and senior staff may review them.
If you believe you are on a blacklist unfairly, contact us and ask for it to be reviewed. Tell us your Roblox username. We will look at the reason recorded, and either remove the entry or explain it.
09Who can see your data
Staff and partner access depends on Roblox group rank or an explicit grant, depending on the portal. Protected requests check those permissions; changes in rank or grants affect what an account can open.
- Our senior staff can see the data behind our own site - tickets and attendees, applications, surveys, and our VIP list and blacklist.
- A partner's crew can see only their own organisation's data: their shows' ticket holders, applications sent to their roles, and their own VIP list and blacklist. They cannot see ours, and they cannot see another partner's.
- Senior RO. Nation LIVE staff can also open a partner's portal, because we build and run these sites for them.
- Our accounting desk is company staff only. If we do business with you, the Roblox accounts you have told us about can see that entity's own documents and requests on pay.ronation.live - their own, and nobody else's.
- A document we send you has a private link. Anyone holding that link can read that one document, which is the point of it - it is how we send you something without making you sign in. Treat it like the document it is.
- Our door system inside the Roblox experience is told whether a ticket code is valid and whose it is. That, and nothing else, is what admits you.
11Where it is stored
Account and service records are stored in our database, and uploaded files in private storage used by the app. Our hosting and infrastructure providers process data to run these services.
Some providers or users may be outside the UK or EEA. Where data protection law restricts an international transfer, an appropriate transfer mechanism must be in place before it occurs. Contact us for details of the countries and safeguards relevant to your data.
12How long we keep it
Plainly:
- Your account - while it is active, subject to any records we must retain after a deletion request.
- Tickets - kept after the event, so a dispute about who was admitted can be settled. They go when your account goes.
- Crew applications - kept while we consider them, and for a reasonable period afterwards so we can answer questions about a decision. Ask, and we delete yours.
- Survey answers - kept while the results are still useful. They stay linked to your account, because that link is what stops the same person answering twice.
- Blacklist entries - reviewed when challenged and kept only while needed for safety; access and retention are assessed in context.
- A Roblox permission grant - kept while it is useful for checking a pass you bought. You can revoke it from your Roblox account settings at any time, and asking us deletes the stored tokens.
- Accounting records and purchase records - kept as financial records for as long as we are required to, and long enough to settle a dispute about a payment. These are records of a transaction between us, so they are the one thing we cannot simply delete on request.
- Server logs - kept according to our hosting and security log settings, then discarded when no longer needed.
13Your choices
You can cancel a reserved ticket from your tickets page before the event starts, provided it has not been checked in.
You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. The simplest way is our data request form: sign in with Roblox and it is tied to the right account automatically, so you do not even need to tell us your username.
You can also withdraw the paid-checkout permission, if you ever gave us one, from your Roblox account settings - or ask us, and we delete the stored tokens.
Deletion is assessed against applicable legal obligations and safety needs. We may need to retain a relevant blacklist or financial record for a justified period; truly anonymous aggregate attendance figures are no longer personal data. We will explain any exception we rely on, rather than refusing a request automatically.
To make a request, use the data request form. If you are locked out of your account and cannot sign in, email [email protected] instead and we will verify it is you another way. Our Data & Privacy Requests page explains the whole process.
14Legal bases and your rights
We process account, ticket and portal data to provide the services you request and administer our terms. We use legitimate interests for security, fraud prevention, event safety and service improvement, balancing those interests against your rights. We keep records where a legal obligation requires it. A separate Roblox permission grant is requested before an optional game-pass ownership check.
You can ask to access, correct or erase your personal data, restrict or object to processing, and request portability where it applies. You can complain to the UK Information Commissioner's Office or the authority where you live. See Data & Privacy Requests for how to contact us.
15Security
We hold no passwords, so there are none to leak - sign-in is handled entirely by Roblox.
Sessions use signed, HTTP-only tokens scoped to a host. Protected portal routes check Roblox rank or explicit grants before showing staff and partner data.
Where you grant a game-pass ownership permission, we store the associated Roblox access and refresh tokens server-side. That grant is limited to a read-only inventory check and cannot spend Robux or change your account. We restrict access to these tokens, but no system is risk-free.
No system is perfectly secure. If you find a vulnerability, please report it through our contact details.
16Changes to this policy
If we change what we collect, or what we do with it, we update this page and the date at the top of it. If a change is significant we will say so in our community channels, rather than hoping you notice a date.
17Contact
Questions, requests or complaints: use the contact page, or email [email protected].
Questions about this document? Reach us on the contact page.