Legal
Privacy Policy
This policy explains what Flaming Fox Creative Private Limited (“Flaming Fox Creative,” “we”) collects when you use this website and how we handle it. We aim to collect only what we need to respond to you and keep the site working.
Information you give us
When you submit the contact or job-application forms we receive the details you enter - for the contact form: your name, email, and project details; for applications: name, email, Discord, optional Roblox handle, role, availability, experience, optional expected pay, portfolio link, and anything you write in the message.
Information collected automatically
When you submit a form we also record your IP address, an approximate location (country/region/city derived from your IP by our hosting provider, Cloudflare), and basic request metadata (browser user-agent, referring page, language). We use this only to prevent spam/abuse and to add context to your inquiry. We do not use third-party advertising or cross-site tracking cookies, and we do not request precise device geolocation.
How we use information
To respond to your inquiry or application, to operate and secure the site, and to prevent abuse. Form submissions are stored in our database and a notification is sent to an internal team channel (Discord) so we see it promptly.
Who we share it with
We do not sell your information. We share it only with the service providers that help us run the studio - our hosting provider (Cloudflare), our team-notification tool (Discord), and our email provider - who process it on our behalf. Game statistics shown on the site come from Roblox's public APIs; data from a Roblox account you connect is described in “Roblox connected apps” below.
Roblox connected apps
We operate applications registered with Roblox (“Roblox apps”) - for example internal studio tools, Roblox Studio plugins, and sign-in for our team - that you can connect to your Roblox account through Roblox's OAuth 2.0 authorization. When you connect, Roblox shows you exactly which permissions (“scopes”) an app is requesting, and you choose whether to allow them. We only receive what you approve.
Depending on the scopes you approve, an app may receive: your Roblox user ID and username (openid, profile), and read or manage access to developer products and game passes in experiences you own or have rights to (developer-product, game-pass). We use this only to provide the tool's function - for example, to show and create monetization items in an experience you choose, or to recognise you when you sign in to an internal tool. We do not read your Roblox messages, friends, or purchase history, and we never ask for your Roblox password.
Access and refresh tokens Roblox issues to us are stored encrypted on our servers and are never shared with third parties or shown in a browser. We do not sell any data received from Roblox and do not use it for advertising. You can revoke an app's access at any time from your Roblox account settings (Settings → Apps / connected apps), which immediately stops it from acting on your behalf; you can also ask us to delete the connection and any stored tokens by emailing contact@flamingfoxcreative.com. Our Roblox apps are subject to Roblox's own terms and privacy policy in addition to this one.
Browser extension (FFC Creator)
We offer a browser extension, “FFC Creator,” that adds helper tools to the Roblox Creator Dashboard (create.roblox.com) for creators on our team. Its everyday tools run entirely inside your own logged-in browser tab and use your existing Roblox session - the same web endpoints the dashboard itself uses - to turn on languages and fill the compliance questionnaire. Those tools send nothing to us; your saved questionnaire answer sets stay in your own browser's storage.
Its Game setup and Access sections are for our studio owner only and work only after he signs in to FFC from the panel and approves the sign-in on our admin site by typing the code the panel shows. Then the extension talks to admin.flamingfoxcreative.com: it sends the Roblox user ID and username of the signed-in Roblox account (to match the sign-in), the ID of the game the dashboard page shows, the setup it reads or changes (languages, devices, server settings, the questionnaire answers it records, pictures you choose to upload), the result of each step it runs on Roblox, and the Roblox usernames and access you type into Access. For Access it also reads on Roblox, with your session, and sends: the names and IDs of the games in your groups (to match the game you name) and, when you open a game's access list, the group's pending invitations (the invited Roblox user IDs and their roles) and each role's permissions on that game. It never sends your Roblox password or cookies. Its FFC sign-in token is kept in the extension's own storage (chrome.storage), not in the web page, and signing out or uninstalling removes it. Nobody outside our studio can sign in to these sections.
Retention
We keep submissions only as long as needed for the purpose above, then delete them. You can ask us to delete your data at any time. Roblox connection tokens are kept only while the connection is active and are deleted when you disconnect or revoke access.
Your rights
You can request access to, correction of, or deletion of your personal information by emailing contact@flamingfoxcreative.com. We respond within 30 days.
Children
This site markets a development studio and is not directed at children. Gameplay within our Roblox experiences is governed by Roblox's own privacy and safety systems.
Contact
Questions about this policy? Email contact@flamingfoxcreative.com.