Last updated 20 October 2026

Privacy Policy

This policy explains what the Super Sports! admin site keeps, about staff and about players, why, and what you can do about it. Staff use the site to handle reports, moderation actions and ban appeals for the game.

Information we collect

About players

• Public Roblox profile details: user ID, username, display name, when the account was made, and avatar picture.
• Moderation records: reports about a player (with who reported them, the reason and which game server), cases, warnings, kicks, bans, data wipes, staff notes, evidence screenshots, anti-exploit detections, and ban appeals with the staff answer.
• Leaderboards: if the game sends them, Roblox user IDs and scores for the game's leaderboards, which can be shown on the public Super Sports! website.

About staff

• When you log in with Discord: your Discord user ID, username, display name, avatar and staff role. We never see your Discord email address or password.
• What you do: every moderation action, case and appeal decision, note and settings change is recorded in the audit log with your name and role.
• Other details: when you last logged in, and whether you want notifications as Discord DMs.

Technical information: like any website, our hosting provider sees your IP address, browser and the pages you open, and keeps short-lived logs to keep the site running and secure.

How we use information

• To keep Super Sports! safe and fair: to look into reports, take action, and handle appeals.
• To keep moderation accountable, so past decisions can be checked and appealed fairly.
• To log staff in and work out what each role may do.
• To keep the site secure and to fix problems.

Where the GDPR or similar laws apply, we rely on our legitimate interest in keeping the game safe and fair and in running the staff's tools securely, and on legal obligations where they apply.

Cookies and browser storage

We only use cookies the site needs. There are no advertising, tracking or analytics cookies.

• ss_adm_session: keeps you logged in, for up to 12 hours or until you log out.
• ss_oauth_state: protects the Discord login against forgery; it lasts 10 minutes while you log in.
• adm_theme and adm_cases: remember light or dark mode and which case list you like, for a year.

The site's fonts come from Google Fonts, so your browser asks Google's servers for them, which shares your IP address with Google.

How long we keep information

• Moderation records and the audit log: as long as they're needed to keep the game safe and to handle appeals fairly. The audit log is never cleared automatically.
• Player profile details: refreshed from Roblox when a player is looked up again.
• Staff: access ends straight away when the role is removed in Discord. Past actions stay in the record under the staff member's name.
• Logins: 12 hours at most.
• Hosting logs: a few days.

Who processes information for us

• Cloudflare hosts the site, its database and evidence screenshots.
• Roblox gives us players' public profiles and, when it's connected, applies bans and passes actions to the game's servers.
• Discord logs staff in and tells us their roles, and delivers staff DMs. If the team has set one up, it also posts the moderation log in a private staff channel.
• Google Fonts serves the site's fonts.

We don't sell information or share it for advertising. What players see in the game never includes a staff member's name.

Your rights

Players and staff can ask us to:

• show them the information we have about them, or give them a copy;
• correct it;
• delete it, or stop or limit how we use it.

Email hello@supersports.io. We answer within one month. We may keep records we need to keep the game safe or to handle an appeal fairly; if we do, we'll explain why. If you're in the EU, the UK or another place with similar laws, you can also complain to your local data protection authority.

Children

Many Roblox players are young. About players we only keep public Roblox profile details and moderation records, and we never ask players for anything more. The admin site itself is only for staff, who need to be old enough to use Discord where they live (at least 13).

Security

The site only works over HTTPS, login cookies are signed so they can't be faked and last at most 12 hours, each role only sees what its permissions allow, and evidence screenshots are only shown to signed-in staff. Every action is recorded in the audit log, and Administrators can log anyone out everywhere.

Contact

For questions about this policy, or to use any of your rights, email hello@supersports.io. Staff can also ask an Administrator in the Super Sports! Discord; players can ask in the Super Sports! Discord. To challenge a ban, use the appeal game.

Changes to this policy

We'll update this policy when the site or the law changes. The date at the top shows the latest version, and we'll mention big changes in the Discord.