Privacy Policy
1. Scope
This policy describes the information ALX HUB (the "Service") collects when a user requests an access key or executes a script, the purposes for which it is processed, and the retention periods that apply.
2. Information Collected
- IP address. Used for rate limiting, verification of checkpoint completion, and prevention of abuse.
- Visitor identifier. A randomly generated value stored in the
alx_uidcookie and cryptographically signed. It is not associated with any user account. - Session identifier. Stored in the
alx_sidcookie for the duration of a single key request. - Client-reported attributes. Browser language, screen dimensions, time zone, and user agent string. These are used to distinguish individual visitors sharing a single network address.
- Hardware identifier (HWID). Transmitted by the executor when a key is used. Each key is bound to the first device on which it is presented.
- Aggregate statistics. Daily totals of keys issued and scripts executed. These are numerical counts and are not attributable to any individual.
3. Information Not Collected
- No account credentials, email addresses, or payment information. Registration is not required and the Service is provided free of charge.
- No Roblox account credentials, session cookies, or authentication tokens are requested, transmitted, or stored at any time.
- No information is sold, licensed, or disclosed to advertisers or data brokers.
4. Retention Periods
- Access keys expire 24 hours after issuance.
- Visitor records are deleted after 90 days of inactivity.
- Aggregate daily statistics are retained for 90 days.
- Abuse and moderation logs are capped at a fixed number of entries; older records are discarded automatically.
5. Third-Party Services
Key issuance requires completion of two checkpoints hosted by work.ink, an external advertising provider. Use of those pages is governed by work.ink's own privacy policy. The Service receives only a token confirming completion and does not receive information regarding content viewed or interactions performed on those pages.
Web fonts are served by Google Fonts. Infrastructure is provided by Amazon Web Services. No other third parties receive data from the Service.
6. Cookies
Two strictly functional cookies are used: alx_uid, to identify a
returning visitor, and alx_sid, to maintain progress through the key
issuance process. The Service sets no advertising or analytics cookies.
7. Deletion Requests
Users may request erasure of all information associated with them by submitting a request via the contact page. As no user accounts exist, requests should include the visitor identifier or the access key issued, so that the corresponding record can be located. Records are deleted in full and no copies are retained.
8. Children's Privacy
The Service is not directed to children under the age of 13 and does not collect age information. Requests to remove information believed to relate to a child will be actioned on receipt.
9. Amendments
This policy may be revised. The date shown above indicates the version currently in effect.
10. Contact
Enquiries regarding this policy may be submitted via the contact page.