Privacy

Sign-in goes through Roblox or Discord. Blacklight never sees a password and never asks for one.

From Roblox, using the openid and profile scopes, we receive and store your Roblox user ID, username, display name, avatar image URL, and account creation date. From Discord, using the identify scope, we receive and store your Discord user ID, username, global display name, and avatar image URL.

Account creation date is stored for one reason: the moderation queue flags reports filed from accounts less than thirty days old, because a fresh alt is the usual way a rejected report comes back.

Email addresses are not requested from either provider and are not stored. No scope granting access to your games, friends, inventory, servers, or messages is ever requested.

The text of every report, comment, and corroboration you write, along with the account that wrote it and the time it was written. Your username and avatar are shown publicly next to anything of yours that a moderator approves.

Evidence images you attach, up to 6 files of 8 MB each, in PNG, JPEG, WEBP, GIF format. Images are stored on the server outside the public web root and are served only through an access-checked route, never as static files, so an image attached to something unapproved cannot be reached by guessing its URL.

Moderator actions are recorded in an internal audit log: who approved, rejected, or changed the tier of what, and when. It is not public.

Uploaded images are stored as you sent them. Photographs can carry embedded metadata such as camera details or GPS coordinates, so strip anything sensitive before attaching it. Screenshots normally carry none.

This is the part that matters most, so it is stated plainly. When somebody files a report, Blacklight stores the Roblox user ID or the Discord user ID of the person being reported, whatever username was recorded for that ID, the written account of what happened, and any evidence images attached.

The person being reported has not agreed to any of this and usually does not know about it. That is why the moderation gate exists: nothing about a reported account is visible to anyone except moderators until a moderator approves it. An account whose reports are all still pending is indistinguishable from an account nobody has ever reported, in search, in the feed, on a permalink, and on a profile page alike.

Only platform account identifiers are collected. Real names, addresses, phone numbers, workplaces, schools, and any other off-platform identifying information are prohibited by the terms and are removed when found.

Three cookies, all strictly functional. There is no advertising, no analytics service, no third-party tracker, and no cookie banner, because there is nothing to consent to.

• dwc_session, set after you sign in. It holds your account ID and a signature, nothing else. HttpOnly, Secure, SameSite Lax, expires after 30 days.
• dwc_state_* and dwc_verifier_*, set for 10 minutes while a sign-in is in progress. They exist to prove the sign-in that comes back is the one you started, and are deleted the moment it completes.
• dwc_next, also 10 minutes, remembering which page to return you to after sign-in.

Signing out deletes the session cookie immediately.

The web server keeps standard access logs containing IP addresses, requested URLs, and browser user-agent strings. They are used for debugging and abuse investigation, rotate daily, and are deleted after fourteen days. IP addresses are never written to the application database and are never linked to your account or shown to anyone.

Nobody. Blacklight does not sell, rent, or share data with third parties, and runs no third-party scripts. Everything lives on a single server operated by Whimco.

The only outbound requests are to Roblox and Discord during sign-in, to verify who you are, and to Roblox to look up the public username and avatar of an account being reported. Avatar images are loaded from Roblox and Discord content servers, which means those companies can see that a browser requested an image.

Blacklight is operated by Whimco. It is not affiliated with, endorsed by, or connected to Roblox Corporation or Discord Inc.

Approved reports and their threads are kept indefinitely, because a record that quietly expires is not a record. Rejected reports and their evidence are deleted once the appeal window has passed.

Deleting a report deletes its comments, corroborations, and evidence files with it. Nothing is left behind as an orphan.

If a report names you, you have a right of reply before anything else. Sign in with the account the report names, whether Roblox or Discord, and your response posts immediately without waiting in the queue and pins above every other reply. If the report is factually wrong rather than merely unwelcome, say so with whatever contradicts it, or write to the address below. Moderators remove reports that do not hold up.

If you want your own account deleted, write to the address below from, or naming, the account in question. Your account record and anything you wrote are removed. Reports filed about you are a separate question and are handled on the merits, since letting the subject of a report delete it would make the whole site pointless.

If you want a specific piece of evidence removed, for example a screenshot that exposes more than it needed to, say which one and why. Evidence can be removed without removing the report.

Much of the Roblox development community is young. Blacklight collects no more about a reported account than a platform user ID and a username, and prohibits off-platform identifying information about anyone. If you believe a report exposes personal information about a minor, write to the address below and it will be handled ahead of anything else in the queue.

Material changes to this page will be noted by the date at the top. Questions, corrections, removals, and privacy requests go to admin@whimco.com.

The process side of all this, meaning tiers, evidence standards, and how review works, is described in how Blacklight works.