Privacy
Updated October 20, 2026
Community ED Values is an independent, unofficial fan project, not affiliated with, sponsored by or endorsed by Malt Games, Elemental Dungeons or Roblox. We claim no ownership of the game or its assets; see the ownership notice in our Terms. This page describes our data use.
Roblox accounts and trades
Roblox sign-in requests only identity and profile access (openid and profile). We save your Roblox ID, username, display name, avatar and account creation date when provided; your profile link is derived from your ID. We do not request your Roblox password, email or inventory, and do not store Roblox access or refresh tokens.
We record sign-ins, profile history, account status, ads, offers, reports and trade confirmations to operate and moderate trading. Your profile and ads are visible to Trade Ads visitors; offers are available to their participants. Authorized staff can review records. Verifying Roblox while signed into a CMS account saves that association without granting CMS access.
Optional Discord account link
You can link a Discord account while signed into Roblox. This requests only Discord's identify permission. We store the verified Discord user ID, username, display name, avatar identifier and linking date; the avatar and a profile link derived from the ID are shown with your trading identity. We do not request email, messages, friends, server membership or presence, and do not store Discord access or refresh tokens.
Use Unlink Discord on Trade Ads to remove the current link and its public display. Private verified-identity and abuse-review history remains to enforce account restrictions, and backups may retain earlier records. Linking grants no CMS permissions and does not send messages. Discord profile access and messaging depend on Discord and the user's settings. Discord handles authorization under its privacy policy.
Cookies, searches and traffic
Necessary cookies support sessions, sign-in and security. Roblox remember-sign-in lasts up to 30 days. Browser storage also keeps preferences, tracked items and drafts.
Search reports retain query text, selected filters, outcome counts and dates without account or session identifiers. Avoid entering personal information in search. Successful-search counting respects Do Not Track and Global Privacy Control.
When enabled, first-party traffic records public page paths, referring domains, campaign tags, approximate browser/device categories, response status and times. Basic counts do not require analytics cookies. Consenting visitors also receive a daily keyed identifier derived from their network address for visitor estimates; raw addresses are not stored in these traffic records. Optional Google Analytics loads only after consent. Change analytics preferences through Feedback on the Value List; Do Not Track and Global Privacy Control disable optional analytics identifiers.
Security, retention and other services
CMS accounts store names, emails, hashed passwords and contributions. Community submissions and attribution may be published. Sessions, security logs and feedback can contain IP addresses, browser details and account identifiers. Feedback stores messages, page/referrer and optional contact details and notifies the operator. Online presence uses a session-derived key and timestamp with a ten-minute activity window.
Account security records retain verified account associations and observed account-access IP addresses, first/last observation times and activity-window counts for Owner review. A shared network is not proof that accounts belong to one person; network matches do not automatically merge or ban accounts. This security record is separate from optional traffic analytics and the anonymous online counter.
Detailed first-party traffic is scheduled for deletion after a configured 1–30 days; daily summaries and search totals remain. Trade, profile and moderation history has no automatic expiry. Closing an ad or signing out does not erase it. Backups may retain records. Contact us about access, corrections or deletion; there is no self-service account deletion.
Hosting and email providers process data to run the site. Roblox and Discord handle authorization and serve their respective avatars; embedded YouTube content and optional Google Analytics contact Google. The Roblox, Discord and Google privacy policies explain those services. Site records support these features, maintenance and abuse review. We do not sell Roblox-supplied data or use it to train AI.
Contact
for questions, concerns or privacy requests. No sign-in is required. Include a reply email if you want a response; never send passwords or security codes.