PRIVACY
POLICY.

This Privacy Policy governs the manner in which MiralvaLabs ("we," "us," or "our") collects, processes, encrypts, and protects player and visitor data in connection with the ZeroScope game experience on Roblox, this website (miralvalabs.com), and affiliated REST APIs.

01

Data Controller & Scope

MiralvaLabs operates as the Data Controller for gameplay statistics, tournament records, support ticket correspondence, and website telemetry collected through our services. Our design philosophy is data minimization: we do not sell personal data, do not serve targeted advertisements, and do not track users across external third-party applications.

02

Categories of Data Collected

We process the following categories of information depending on your interaction with our services:

• Roblox Account Identifiers: Your public numeric Roblox User ID, username, and display name. We do not receive or store real names, billing addresses, or credit card details.
• In-Game Combat Telemetry: Match duration, kills, deaths, headshot percentages, weapon firing accuracy, round outcome, win counts, and leaderboard ratings.
• Anti-Cheat Security Logs: Heuristic physics anomalies, suspicious velocity spikes, memory tampering detection flags, and server-side verification tokens.
• Network & Access Metadata: IP addresses are collected strictly for rate limiting, DDoS mitigation, and ban enforcement. IP logs for standard web access are automatically discarded after 90 days.
• Staff Authentication Data: For authorized MiralvaLabs staff accessing internal moderation tools, Discord OAuth tokens and user identifiers are processed.

03

Support Ticket Data & Mandatory Email Processing

When you initiate a support ticket, ban appeal, bug report, or data deletion request on our Support Portal, we collect the following details:

• Email Address (Mandatory): A valid email address is required for all ticket submissions. We use this email solely to transmit your ticket confirmation, unique tracking ID, and official replies from our moderation staff.
• Roblox Identification: Your Roblox username and optional/required User ID to locate your account in game records.
• Subject & Narrative Message: The detailed description and context of your inquiry.
• Abuse Prevention Telemetry: Source IP address to enforce rate limits (maximum 3 tickets per hour per IP) and prevent spam flooding.

04

Legal Bases for Processing (GDPR)

Under the European Union General Data Protection Regulation (GDPR) and UK Data Protection Act, we process your personal data under the following lawful bases:

• Performance of a Contract: Providing core gameplay, leaderboard synchronization, and fulfilling tournament reward disbursements.
• Legitimate Interests: Enforcing game rules, maintaining robust anti-cheat protections, mitigating server attacks, and ensuring a fair environment for all players.
• Consent: Voluntarily provided support ticket inquiries and email correspondence.
• Legal Obligation: Preserving records when mandated by valid court orders or law enforcement legal instruments.

05

How We Use Collected Data

All collected data is utilized strictly for the operational management of ZeroScope:

• Calculating real-time combat performance and rendering public leaderboards.
• Validating tournament bracket placements and issuing verified Robux prize distributions.
• Reviewing player moderation reports, investigating cheaters, and executing ban enforcements.
• Communicating official support ticket resolutions directly to players via email.
• Monitoring server uptime, performance bottlenecks, and patch stability.

06

Storage, Cloudflare Infrastructure & Security

All ZeroScope databases and API workers are hosted on Cloudflare D1 and Cloudflare Serverless Workers. Data is encrypted in transit via Transport Layer Security (TLS 1.3 / HTTPS) and encrypted at rest on Cloudflare's secure edge nodes.

Access to administrative dashboards is protected by multi-factor Discord OAuth authentication, IP allowlisting, and strict role-based permission tiers (e.g. support, leaderboard, superadmin).

07

Third-Party Sub-processors

We work exclusively with trusted, industry-leading infrastructure providers:

• Roblox Corporation: Host platform powering the 3D client and in-experience data stores.
• Cloudflare, Inc.: Global CDN, edge compute, database (D1), and DDoS mitigation.
• Resend / Email Relay: Transactional email service utilized exclusively to deliver automated ticket confirmations and moderator replies.
• Discord Inc.: OAuth identity verification for staff administrators and official community server integration.

08

Data Retention Schedules

We maintain strict retention boundaries to minimize stored records:

• Lifetime Career Statistics: Retained for the active lifecycle of the game to display lifetime player achievements.
• Moderation & Ban Records: Retained indefinitely for safety, anti-evasion enforcement, and community protection.
• Support Tickets & Emails: Retained for up to 12 months following ticket resolution, after which all correspondence and email identifiers are permanently purged.
• Network IP Logs: Purged automatically on a rolling 90-day schedule.

09

Player Privacy Rights (GDPR & CCPA)

Regardless of your geographic location, MiralvaLabs extends comprehensive privacy rights to all players:

• Right of Access (Data Portability): You may request a machine-readable summary of all records linked to your Roblox User ID.
• Right to Erasure (Right to be Forgotten): You have the absolute right to request permanent deletion of your gameplay stats, support history, and personal identifiers.
• Right to Rectification: You may request correction of erroneous records.
• Right to Restrict Processing: You may object to specific non-essential data processing.

To exercise any of these rights, submit a request via our Support Page (selecting "Data Deletion") or email us at privacy@miralvalabs.com. We will process and fulfill your request within 30 days.

10

Children's Privacy (COPPA Compliance)

ZeroScope is designed for competitive gamers of all ages on Roblox. In compliance with the Children's Online Privacy Protection Act (COPPA) and international youth data standards:

• We do not collect real names, physical home addresses, school information, or phone numbers from any user.
• We do not engage in behavioral tracking or targeted marketing toward children.
• Parents or legal guardians may review, export, or request deletion of any data associated with their child's Roblox account by contacting our privacy officer.

11

International Data Transfers & Incident Response

ZeroScope's infrastructure operates across globally distributed Cloudflare edge data centers. By accessing our services, you understand that your data may be processed in jurisdictions outside your home country. We utilize standard contractual safeguards to ensure comparable data protection levels.

In the unlikely event of a security incident impacting player data, we will post immediate public disclosures in our official Discord server and notify affected users via email where available.

12

DPO Contact & Policy Revisions

We may periodically update this policy to reflect operational improvements or regulatory updates. Changes take effect upon posting with an updated "Last Updated" timestamp.

For privacy inquiries, Data Protection Officer contact, or GDPR/CCPA requests, reach us at: