1. Responsible person
The operator and personal-information protection officer is iMasterProX. Contact imasterprox@gmail.com for privacy questions, access, correction, deletion, restrictions or complaints. This Policy covers the RXO game, website and operator-managed community tools. External services have their own policies.
2. Information processed
We handle Xbox identifiers (including XUID), player names, UUID/profile identifiers; available IP/network addresses, login times, device identifiers, operating system/model and client language; race results, rankings, ghost movement, progress, virtual items/currency transactions and settings. Some device settings use a salted derived identifier, but moderation can retain the original client-provided identifier. This data is not all anonymous.
3. Communications and community tools
In-game chat and commands may appear in operational logs. Reports, evidence, sanctions, abnormal-input indications and account/address/device traces support investigations. RitaGirl processes Discord user/channel/message identifiers, verification challenge digests and expiry/attempt counters, incident timestamps, strikes and moderation audits. Support email includes your address and information you choose to send. Ordinary play does not require account passwords, card details, home addresses or identity documents.
4. Purposes and visibility
We process data to deliver requested gameplay, restore accounts and settings, operate connections, secure the service, enforce fair play, answer requests and meet legal obligations. Necessary authentication/connection data is required to play. Separate consent is obtained when law requires it. Names, appearances, participation, rankings and shared messages can be visible to other players; administrators may view messages for moderation. Private identifiers, traces and reports are not intended for public leaderboards. We do not sell personal data or provide it to behavioural advertisers.
5. Providers and international processing
The operator's game/data host and a Vultr relay deliver connections and files. A local DB-IP database estimates country. Microsoft handles Xbox authentication and multiplayer; RXO Direct uses authenticated player identifiers in discovery/follow APIs for friend multiplayer visibility. Contact the operator about removal, and use Microsoft's privacy/blocking controls. Discord processes community activity and RitaGirl API events; Google provides Gmail support email. Game data is operated in Korea; external providers may process data abroad, including the United States. Where legally required, separate transfer notice or consent is needed. Necessary lawful or safety disclosures may occur. Provider policy links appear below.
6. Retention and deletion
Account data is kept for your account's duration so you can return. Leaving a session or changing a name does not delete it. Request closure/deletion from the operator. Logs, support and safety records remain while needed for operation, investigation, requests/appeals, active restrictions or legal obligations. There is currently no universal fixed automatic deletion period for all logs, accounts or bot records; review and requests are handled manually. Unneeded data is deleted or irreversibly de-identified. Backups may temporarily retain copies until rotation; required deletions must be respected during restoration.
7. Rights and requests
Subject to law, you may request access, correction, deletion, restriction/suspension, withdrawal of consent or human review of significant automated moderation. Email imasterprox@gmail.com with 'RXO Privacy Request', your relevant player/community identity and the request. We may verify account control to prevent unauthorised disclosure or deletion; do not send passwords. We respond within legally required periods and explain lawful refusals or effects on game progress. You may complain to the competent authority, including Korea's Personal Information Protection Commission.
8. Children and security
Meet Minecraft/Microsoft and any Discord age requirements. Children should avoid sharing private details. Where law requires guardian consent, it must be separately obtained and verified, including applicable consent cases for children under 14 in Korea; a general game notice is not verified guardian consent. Guardians can contact the privacy officer. We use restricted administration, HTTPS, protected relay connections and access-controlled backups. No measure removes all risk; legally required breach notices will be made.
9. Website language and cookies
An IP-based approximate country estimate chooses the initial website language when you visit an unprefixed page. It uses our existing local country database, not browser GPS or a third-party lookup request. Explicit language URLs and your manual choice take precedence; unknown regions use English. The functional cookie rxo_web_region remembers only your chosen language/region for up to 365 days, not your IP or an account identifier. You can change the language at the bottom or delete/block cookies in your browser. These pages use no advertising trackers, third-party analytics or marketing cookies and require no website account. Public assets may be cached; address copying uses the clipboard only when pressed.
10. Policy changes
Changes are published here with an effective date and additional notice for material changes where appropriate or required. A policy update does not authorize a new use requiring separate consent. Personal-information protection officer: iMasterProX. Email: imasterprox@gmail.com.