Privacy Policy

What BFC stores

When you sign in with Roblox, BFC stores the public account identity returned by Roblox OpenID Connect, including your Roblox user ID, username, display name, public avatar/profile links, your BFC role, and login timestamps. BFC does not receive or store your Roblox password.

BFC also stores content and actions you choose to make on the site, such as discussions, replies, votes, bookmarks, suggestions, reports, moderation status, and BFC session records.

Cookies and sessions

BFC uses an HttpOnly session cookie to keep you signed in and a short-lived OAuth state cookie during Roblox login. These cookies are used for authentication and security, not advertising.

Public content

Discussions, replies, suggestions, vote totals, public Roblox names/avatars and owner responses may be visible to other visitors. Do not post private or sensitive information.

Third-party services

BFC links to and may display public information from Roblox, Reddit, YouTube and X. Those services have their own privacy policies and terms. BFC's Roblox login requests only the openid and profile scopes.

Security and retention

Authentication secrets and the SQLite database are kept on the server and are not intended to be publicly downloadable. Sessions expire automatically. Site operators may retain moderation records, reports and backups for safety, abuse prevention and service recovery.

Your choices

You can log out from the current session or all sessions from the Account page. You may request removal of BFC-created content or account-related data through the site's published support/contact channel, subject to legitimate moderation, security and legal retention needs.

Changes

This policy may be updated as BFC changes. Material changes should be reflected by updating the date above.