Privacy Policy

Last updated: June 2025

Privacy at a glance

  • We only collect data needed to run the marketplace — account info, purchase history, and usage analytics.
  • We never sell your personal information to advertisers or data brokers.
  • Top-ups are processed by Whop — card data never touches our servers.
  • Loyalty Cakes, referral credits, and prize-draw entries are stored on our servers — they have no cash value and may expire after 12 months of account inactivity.
  • Children under 13 cannot create accounts. Users under 18 need parental consent to claim prizes.
  • You can request a copy of your data or ask us to delete your account at any time.

1. Introduction

Pet Bakery ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. Please read this policy carefully.

2. Information We Collect

Account Information: Name and email address, profile picture, and optional Roblox username (for in-game trade delivery).

Transaction Data: Purchase history, listing history, wallet balance and transaction logs. Payment details are processed securely by Stripe — we do not store card numbers.

Loyalty & Rewards Data: Cakes balance, prize-draw entry counts, referral codes and credits earned, flash-event participation records.

Usage Data: Pages visited, search queries, listing views, IP address, browser type, device information, and session data.

User-Generated Content: Listings, messages, reviews, trade requests, want-to-buy posts, shop profile details, and social media video links submitted via the #petbakery programme.

3. How We Use Your Information

We use your information to operate the marketplace, process payments and payouts, administer the Cakes loyalty programme and giveaways, send transactional notifications, detect and prevent fraud, provide customer support and resolve disputes, and comply with legal obligations.

We do not sell your personal information to third parties.

4. Loyalty & Rewards (Cakes)

The Cakes loyalty programme lets you earn in-platform points through purchases, referrals, and participation in events.

  • No cash value: Cakes cannot be exchanged for real money.
  • Pity system: Your pity counter is stored server-side only and is never shared publicly.
  • Expiry: Cakes may be forfeited after 12 consecutive months of account inactivity.
  • Prize fulfilment: Roblox-based prizes are delivered in-game via your linked Roblox username.

5. Social Content & Referrals

If you submit a TikTok or YouTube video link through the #petbakery social content programme, we store your video URL and submission details. Pet Bakery may re-share approved videos on our own social channels with attribution. We do not access your social media account credentials.

For referrals, we record the referral code and the referring/referred user IDs, used solely to apply referral credits.

6. Third-Party Services

  • Stripe — Payment processing. PCI-DSS compliant. See Stripe's Privacy Policy.
  • Whop — Wallet top-ups. See Whop's Privacy Policy.
  • PayPal — Optional seller payout method. PayPal email is stored securely to send seller earnings.
  • Google OAuth — Optional sign-in. We receive your name, email, and profile picture. See Google's Privacy Policy.
  • OpenAI — Powers our AI Assistant and market-trend research tool. See OpenAI's Privacy Policy.
  • Resend — Transactional and notification email delivery.

7. Cookies & Local Storage

We use session cookies to keep you logged in and to maintain your preferences. We do not use third-party advertising cookies or tracking pixels.

Affiliate attribution cookie (pb_ref): When you visit via a creator's referral link, we set a first-party cookie named pb_ref that expires after 30 days. It is used solely to attribute purchases to the referring creator. No personal data is shared with creators — they only see aggregate statistics.

8. Push Notifications

If you opt in to browser push notifications, we store your push subscription endpoint and encryption keys to deliver real-time alerts. You can disable push notifications at any time from your account menu.

9. Data Retention

We retain your account data for as long as your account is active. Transaction records may be retained for up to 7 years for accounting and legal compliance. If you delete your account, your personal information will be removed from active systems within 30 days, except where retention is required by law.

10. Your Rights

Depending on your location, you may have the following rights: Access (request a copy of your data), Rectification (correct inaccurate data), Erasure (delete your account and data), Opt-out (unsubscribe from marketing emails), and Data portability.

California residents (CCPA): You have the right to know what personal information we collect and to request deletion. We do not sell personal information.

EU/UK residents (GDPR): Our legal basis for processing your data is contract performance and legitimate interests (fraud prevention, platform security). You also have the right to lodge a complaint with your local data protection authority.

11. Security

We use industry-standard security measures including HTTPS encryption, hashed passwords, and authenticated API endpoints to protect your data. Please use a strong, unique password and enable two-factor authentication on linked accounts where possible.

12. Buyer & Seller Protection Data

When you place or fulfill an order, we process and store delivery Roblox usernames, optional delivery screenshots, dispute records (retained 12 months after resolution), seller strike counts and expiry dates, and rolling reserve amounts per order.

This data is processed on the basis of our contractual obligation to facilitate safe transactions and our legitimate interest in preventing fraud and chargebacks.

13. Children's Privacy (COPPA)

Pet Bakery is intended for users aged 13 and over, consistent with Roblox's minimum age policy and COPPA. We do not knowingly collect personal information from children under 13.

If you believe your child under 13 has created an account, please contact us immediately via the data-request form on the Privacy page or through the Help section.

14. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, contact us through the AI Assistant or Help section on the platform, or email us at support@petbakeryofficial.com. We aim to respond to all requests within 30 days.