Privacy Policy

This Privacy Policy applies to the peekstore.com site and associated services, operated by PEEK DIGITAL LLC (PEEK DIGITAL Limited Company), a company organized under the laws of the State of Wyoming, United States of America, with mailing address at 1007 N Orange St., 4th Floor, Suite 5386, Wilmington, DE 19801, USA, and email legal@peekstore.com. For the purposes of this policy, PEEK DIGITAL LLC acts as the controller of its users' personal data.

At PEEK STORE we are committed to protecting your privacy. This Policy describes what data we collect when you use our digital store (digital products and services such as Robux), how we use it, with whom we share it, and what rights you have. PEEK STORE is an independent digital store and is not affiliated, associated, or endorsed by Roblox Corporation.

We collect only the data necessary to provide the service, process payments, prevent fraud, and comply with the law. Below we detail the categories:

We use your data to:

• Product delivery: process orders and deliver Robux or digital services
• Support: handle queries, claims, and tickets
• Fraud prevention: detect and prevent misuse, false chargebacks, duplicate accounts, and promotion abuse
• Analytics: improve the website, performance, and user experience
• Marketing and communications: send abandoned cart reminders, offers, and news in accordance with the applicable legal basis
• Legal compliance: when required by law or to defend rights in case of claim

We process your data based on the consent you give us when registering and accepting this policy, on the performance of the contract (provision of the purchase and delivery service), on legitimate interest (security, analytics, fraud prevention, service improvement) and, where applicable, on compliance with legal obligations. You may withdraw your consent at any time by contacting us; this will not affect the lawfulness of prior processing.

We use cookies and similar technologies classified into the following categories:

• Essential: indispensable for the operation of the site (session, authentication, CSRF prevention). They do not require consent.
• Functional: remember user preferences (language, currency, configuration). They improve the experience without being indispensable.
• Analytics: measure the use of the site to improve performance and experience. May include anonymized or pseudonymized data.
• Marketing: allow displaying relevant advertising and measuring campaigns. They include Facebook Pixel, Google Ads, and similar tools. They require prior consent where the law so requires (European Economic Area, United Kingdom, Brazil, and other applicable jurisdictions).
• Anti-fraud: include device fingerprinting techniques, IP rate limiting, honeypot fields, and risk scoring, used exclusively to protect the platform against fraud, abuse, or automated attacks.

We do not sell your data and we do not hand it over for advertising in exchange for money. We share it only with the parties needed to charge you, deliver your order and keep the service running, and each one receives only the minimum it needs:

Where they are: Several of these providers operate outside your country. The safeguards we apply to those transfers are explained in the International Transfers section.

We retain your data for the periods necessary to fulfill the purposes described, applicable legal obligations, and the exercise or defense of claims. Indicative periods:

• Active account data: as long as the account remains active or its deletion is not requested.
• Closed account data: up to twelve (12) months after closure, except for higher legal retention obligation.
• Order and billing data: between five (5) and ten (10) years in accordance with the accounting and tax obligations of the applicable country.
• Support tickets and messages: up to twenty-four (24) months after ticket closure.
• Technical and security logs: between six (6) and twelve (12) months, with the possibility of longer retention when necessary to investigate incidents.
• Optional third-party credentials (Discord tokens): deleted or invalidated after completing the operation that motivated their delivery, within a period not exceeding seventy-two (72) hours.
• Cookies and marketing data: according to the duration indicated in the consent banner; can be revoked at any time.

After the applicable periods, the data is deleted, irreversibly anonymized, or kept solely for aggregate statistical purposes without the possibility of identification.

We apply appropriate technical and organizational measures to protect your data against unauthorized access, loss, alteration, or disclosure: encryption in transit, role-based access control, secure environments, access logging, and periodic review of practices. No system is foolproof; if you detect an incident, contact us immediately at legal@peekstore.com.

You have the right to access your data, rectify it if incorrect, request its deletion (when we should not retain it by law), object to certain processing, limit the processing and, where applicable, to data portability. You can request the permanent deletion of your account and associated data. To exercise these rights, contact us at legal@peekstore.com or through the channels indicated in the Contact section. We will respond within the period established by the applicable law according to your place of residence.

Our services are not directed to children under 13 years of age. We do not intentionally collect personal data from children under 13 years of age in accordance with the Children's Online Privacy Protection Act (COPPA) of the United States. Minors between 13 and 18 years (or the age of majority in their jurisdiction) may only use the service with authorization and under the supervision of their legal representative. Certain features (contests with cash prizes, specific promotions) may require legal age. If you are a parent or guardian and consider that a minor has provided us with data without your authorization, contact us at legal@peekstore.com to request its deletion.

PEEK DIGITAL LLC operates from the United States of America. By using our services you understand and accept that your data will be processed and stored in the United States and, through our providers, in other jurisdictions. When your data is transferred from the European Economic Area, United Kingdom, or other jurisdictions with data protection laws, we will apply recognized safeguards (Standard Contractual Clauses, adequacy decisions, or equivalent mechanisms) to ensure an adequate level of protection.

We may update this Privacy Policy from time to time. Substantial changes will be notified at least fifteen (15) days in advance through notice on the website or by email when possible. The «Last updated» date at the top of the document indicates the latest revision. Continued use of the service after the changes take effect implies acceptance of the updated policy.

To exercise your rights, queries about this policy, or any matter related to your personal data, you can contact us by:

We will respond within a reasonable time according to the nature of your request and in accordance with the applicable legal deadline.

Rights differ by country. Pick yours and we show exactly what applies, instead of making you read four legal frameworks that do not concern you.

PEEK STORE may send promotional communications by email or other channels:

• Abandoned cart reminders, offers, discounts, product announcements, and news.
• Notifications of events, contests, and promotions.

Only authorized PEEK STORE personnel access personal data and always under the principle of least privilege: each role (administration, support, moderation, antifraud team) accesses only the information strictly necessary for their functions.

Accesses are logged and monitored. Personnel are subject to confidentiality obligations and internal sanctions in case of misuse. PEEK STORE may revoke accesses at any time upon suspicion or evidence of non-compliance.

Part of PEEK STORE's customer support relies on artificial intelligence systems. When you write in the support chat or in an order chat, the content of your messages may be sent to our AI provider to draft a reply, summarise or title the conversation, and detect abusive content before it reaches a member of our team.

What is sent is the text of the conversation and the minimum order context needed to understand it. Your password, your payment method and your billing details are never sent. You can ask for a human at any time and we will give you one, no questions asked.

In the event of detecting a security breach that significantly affects users' personal data, PEEK STORE will notify the competent authority(ies) and, where appropriate, the affected users, without undue delay and, when GDPR or LGPD applies, within seventy-two (72) hours of becoming aware of the breach.

The notification to users will include, to the extent possible, the nature of the incident, the categories of data affected, the possible consequences, and the measures adopted or proposed to mitigate the effects. Communications will be made by email, visible notice on the website, or other means proportional to the risk.

To protect the integrity of the platform and prevent fraud, PEEK STORE generates a technical identifier (device fingerprint) from characteristics of the user's browser and device, such as canvas configuration, WebGL, audio, installed fonts, plugins, time zone, language, and screen resolution.

This identifier is used solely for security purposes, fraud prevention, detection of duplicate accounts, and application of the Terms and Conditions. It is not used to profile the user for advertising purposes or assigned to third parties for commercial purposes.

The customer may object to this processing by contacting us. In such case, certain fraud-sensitive operations may require additional verifications before being completed. The legal basis of this processing is PEEK STORE's legitimate interest in protecting its service and its users from fraud.

If the user subscribes to Peek Pro, PEEK STORE processes additional data necessary to manage the subscription and recurring billing: customer identifier with the gateway (Stripe Customer ID, PayPal Billing Agreement ID, Mercado Pago Preapproval ID), contracted plan, start, renewal and cancellation dates, subscription status, billing history, refunds and tokenized payment method.

PEEK STORE does not store the full card number or the CVV. Payment data processing is performed directly by certified gateways (PCI DSS), which act as independent data controllers under their own privacy policies.

Additionally, to deliver the Robux stipend associated with the plan, PEEK STORE records the Roblox username of the holder and may verify its eligibility according to the delivery procedure in force. This verification is carried out solely for operational purposes related to the delivery of the benefit.