PRIVACY

Play first. Collect less.

A plain-language overview of what the Set & Steal website uses, what stays on your device, and what will change before accounts launch.

Effective October 12, 2026English master copy

Current website

The public website can be visited without creating an account. Your guest display name, selected animal avatar, tutorial state, and Solo vs Bot save are stored in your browser on your device. Clearing browser storage removes that local data.

Public web accounts and cross-device match history are not launched yet. Before they launch, the account, privacy, and moderation flow will receive a separate review, and this notice will be updated.

Information the service may process

  • Standard security and delivery data such as IP address, browser type, requested page, timestamp, and error information processed by the hosting provider.
  • Device-local game and profile choices saved by your browser.
  • If public tables launch: a chosen display name, avatar, table membership, match actions, and abuse-prevention signals needed to operate the match.
  • If accounts launch later: username, password verifier, profile choices, wins, and match history. A Roblox password or Roblox access token will never be requested.

Why it is used

Data is used only to deliver pages and gameplay, keep the service secure, remember local choices, diagnose failures, prevent abuse, and—after a reviewed account launch—save the profile and stats a player asks us to keep.

Sharing

Service providers may process limited data to host, secure, or measure the website. Player data is not sold. Public table names and player display names may be visible to other players once multiplayer launches.

Children and Roblox

The website does not import Roblox account data. Roblox gameplay is governed by Roblox platform controls and policies. Do not put real names, contact information, or other sensitive information in a display name or table name.

Your choices

You can play Solo vs Bot without an account, clear device-local data through browser settings, and avoid public tables. Account deletion and data-access controls will be provided before public accounts launch.