← Back to the roadmap
Privacy Policy
Effective October 15, 2026
The short version: we only use your Roblox account's ID, username and avatar so you can sign in and post, and we ask your date of birth once to check you're 13 or older. We don't keep your date of birth. We never ask for your email, real name or password. We don't sell your data, show ads or use tracking or analytics.
Who we are
This website, wildjroadmap.com (the "Site"), is run by the WJS QA & Development Team ("WJS", "we", "us"). It shows the development roadmap and bug feed for our Roblox game and lets players report bugs, suggest features and comment. To contact us about privacy, use the contact form and choose Privacy or data request.
What we collect
| What | Where it comes from | Why |
|---|---|---|
| Roblox user ID, username and avatar image link | Roblox, when you sign in (or Roblox's public avatar service if the sign-in doesn't include it) | To sign you in, show your posts and comments, and check your studio rank |
| Your studio rank (for example QA Tester) | Our Roblox group, or set by an admin | To show your rank badge and decide what you can do |
| Your date of birth | You, once, when you first agree to the rules | To check you're 13 or older. We don't keep it: we only keep a note that your account passed the check, and when. |
| Your agreement to the rules | You | To record that you accepted these terms |
| Bug reports, suggestions, comments, votes, "Me too" marks, images and Medal links you add | You | To run the roadmap, bug feed and suggestions |
| Contact conversations: your messages, your replies and ours | You and us | To answer you |
| If your account is banned from posting: your Roblox user ID and username, what you can't do, the reason, when it ends, who banned you, and an optional private staff note | Our staff | To stop accounts that break the rules from posting |
| A sign-in cookie | Our server | To keep you signed in. It's strictly necessary. |
| An age-check cookie, only if the age check shows you're under 13 | Our server | So the check can't be taken again early on that browser. It only holds the date you can try again, nothing about who you are. It's strictly necessary, and these two are the only cookies we set. |
| IP address and basic request details in server logs | Your browser | Security and keeping the Site running |
When you upload an image, we automatically remove hidden data stored inside it, such as the GPS location a phone camera may add.
We do not collect your email address, real name, password, phone number, location or payment details. We don't receive your Roblox display name. When you sign in, Roblox asks for your permission and shows what it will share with us.
Who can see what
- Bug reports and suggestions appear publicly only after a staff member approves them. The public sees your rank badge (or "Visitor"). Staff can see your username.
- Comments show your username, avatar and rank badge publicly.
- Votes and "Me too" marks are only shown as totals.
- Contact messages can only be read by you, our QA Managers and the site maintainer, and any other staff member the Studio Owner or site maintainer specifically gives access to handle them.
- Classified posts: staff can mark a post as Confidential, Secret or Top Secret (for example an exploit report). Then only certain staff ranks can see it, and it's hidden from everyone else, including you.
- Bans: if your account is banned, you see the reason and when it ends. The details, including any private staff note, are only visible to staff who can ban.
Who we share it with
We don't sell or rent personal information, and we don't share it for advertising. We only share it:
- Railway (railway.com) hosts the Site and stores its data, including backups, on servers in the United States (California), under its terms of service.
- with Roblox when you sign in, and when your browser loads avatar images from Roblox's servers (Roblox can see your IP address when that happens);
- never with Discord: when you send a contact message, our staff may get a notification in our Discord server saying that a message arrived and its topic. It never includes your message, your username or anything else about you;
- with Medal.tv, if you choose to play a Medal clip someone has linked. The clip loads from Medal and their privacy policy applies;
- if the law requires it, or to protect players and the Site from abuse.
Where your information is kept
The Site is operated from, and intended for users in, the United States. You can still use the Site from elsewhere, but your information is stored and processed in the United States. By using the Site, you acknowledge this.
If you live outside the US, you may also have the right to complain to your local data protection authority.
Children
You must be 13 or older to post, vote or comment. Players under 13 can browse the Site, but we don't let them submit content. We ask for your date of birth once to check your age, and we don't keep it. If the check shows you're under 13, we don't keep any information about you: we sign you out and delete the details Roblox shared when you signed in. You can still browse the Site, and signing in stays blocked until you turn 13. If we learn that we have collected content or personal information from a child under 13, we delete it. Parents or guardians can ask us to review or delete their child's information through the contact form.
How long we keep it
- Posts, comments, votes and images stay until you ask us to delete them, staff remove them, or the Site closes.
- Contact conversations are deleted automatically 12 months after their last message.
- Ban records are deleted automatically 12 months after the ban ends or is lifted.
- We don't keep your date of birth. The note that you passed the age check is kept while your account exists.
- The sign-in cookie expires after 7 days. The age-check cookie expires on the date it holds.
- Our staff activity log keeps only the latest 500 actions.
- Our hosting provider keeps request logs, which include IP addresses, for about 7 days.
- We keep automatic backups so we can recover from mistakes. Anything you or we delete is removed from our backups within 30 days, when those backups expire.
Your choices and rights
You can ask us to show you, correct, or delete the information we hold about you, or to stop using it. We only use your information to run your account and your posts, so stopping using it means deleting it (see below).
- Get a copy: while signed in, open the Contact page and press Download my data. You get a file with everything we store about your account, straight away.
- Correct or delete: send a contact form message while signed in with the Roblox account it's about, choose Privacy or data request, and tell us what you'd like. Signing in is how we confirm the request is really from you, so we never need extra ID. We reply within 30 days. Our reply shows up on your Contact page, and you can reply back there if you have questions.
- What we can correct: your bug reports and suggestions. We don't keep your date of birth, but if you ask, we can reset your age check so you're asked again. Your username and avatar come from Roblox: change them there and they update here the next time you sign in.
- What deletion covers: your votes, "Me too" marks, comment reports, other contact messages, rules agreement, age check and profile are deleted. You choose whether your bug reports and suggestions are deleted too, or stay up without your name (your comments are then removed, or kept without your name). Anything you or we delete is removed from our backups within 30 days, when those backups expire.
- What we keep after a deletion: the conversation with your request, as a record that we handled it (deleted automatically 12 months after its last message); a ban that's still active, so deleting data can't be used to get around it; and a studio rank staff gave you by hand, which controls staff access.
- To handle a request, the staff who read contact messages can see the data we hold about you (we never hold your date of birth). Each time they do, it's recorded.
We will reasonably try to honour requests made under the privacy laws of the place where you live.
You can also stop the Site's access to your Roblox account at any time in Roblox's account settings, under the apps you've authorized.
Security
The Site uses HTTPS, signed sign-in cookies that scripts can't read, server-side permission checks on every request, rate limits, and security headers that stop other sites from embedding or scripting it. Uploaded images are checked and cleaned before they're stored. No system is perfectly secure, so please don't put personal information in posts or messages.
Changes
If we change this policy in an important way, we'll update the date above and ask you to agree again the next time you sign in.