Privacy Policy

This Privacy Policy explains how cursors.lol (the "Service") collects, uses, discloses, and retains information. cursors.lol is a platform for discovering and sharing custom Roblox cursor assets. By using the Service, you agree to this Policy.

Account and profile data: Information received from Roblox when you authenticate using Roblox OAuth. This includes:

• Your Roblox user ID
• Your Roblox username
• Your Roblox display name
• Your Roblox avatar thumbnail URL

Authentication and session data: Session identifiers and tokens necessary to keep you signed in and secure the Service.

Service activity data: Data related to features you use on the website, including cursor submissions, favorites, and any administrative actions if applicable to your role.

Communications: Information you intentionally provide when you contact us or interact with support channels.

We use cookies strictly necessary for authentication and session management. These cookies are set to operate the Service and do not provide targeted advertising. We do not use tracking cookies, analytics cookies, or advertising cookies.

• sb-*-auth-token — Supabase authentication session cookie, used to keep you signed in
• oauth_state — Temporary cookie used during sign-in to prevent cross-site request forgery, deleted immediately after authentication

If you disable these cookies in your browser, some parts of the Service may not function.

• To operate, maintain, and improve the Service
• To authenticate users and manage sessions
• To provide features such as cursor submissions and favorites
• To monitor, prevent, and detect abuse, fraud, or misuse
• To comply with legal obligations and enforce terms and policies

• Consent — for optional features where consent is requested
• Contract — to provide the Service you request
• Legitimate interests — securing, improving, and operating the Service
• Compliance with legal obligations

Service providers and infrastructure: We rely on providers to run the Service (e.g., Supabase for authentication and database; Vercel for hosting). These providers process data on our behalf under appropriate agreements.

Third-party authentication: When you choose to sign in with Roblox, that provider processes your information under its own terms and policies.

Team members/administrators: Limited access to data to administer the Service, support users, and enforce rules.

Legal and safety: We may disclose information to comply with the law, enforce our terms, or protect rights, property, or safety.

We do not sell your personal data.

We retain information for as long as needed to operate the Service, comply with legal obligations, resolve disputes, and enforce agreements. Where possible, data is de-identified or deleted when no longer needed. You may request deletion of your account and associated data at any time.

The Service is intended for users aged 13 and over, in accordance with Roblox's terms of service. We do not knowingly collect personal information from children under the age of 13. If you believe we have collected information about a child under 13, please contact us immediately so we can take appropriate action.

We use reasonable technical and organizational measures to protect information. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Information may be processed and stored in countries other than your own with different data protection laws. We apply appropriate safeguards as required by law.

Depending on your location, you may have rights to access, correct, delete, restrict, or export your data, and to object or withdraw consent where applicable. To exercise these rights, please contact us using the method described below. We may request verification of your identity.

We have included links on this website for your use and reference, including links to GitHub and Roblox. We are not responsible for the privacy policies on these websites. You should be aware that the privacy policies of these websites may differ from our own.

We may update this Policy from time to time. Continued use of the Service after changes become effective constitutes acceptance of the updated Policy.

For privacy requests or questions, please open an issue on our GitHub repository or use the support channels listed on the website.