Privacy Policy

Last updated: August 26, 2026

Privacy at a glance

  • We only collect data needed to run the marketplace — account info, purchase history, and usage analytics.
  • We never sell your personal information to advertisers or data brokers.
  • Top-ups are processed by Whop — card data never touches our servers.
  • Loyalty Cakes, referral credits, and prize-draw entries are stored on our servers — they have no cash value and may expire after 12 months of account inactivity.
  • Children under 13 cannot create accounts. Users under 18 need parental consent to claim prizes.
  • You can request a copy of your data or ask us to delete your account at any time.

1. Introduction

Pet Bakery ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. Please read this policy carefully.

2. Information We Collect

Account Information: Name and email address, profile picture, and optional Roblox username (for in-game trade delivery).

Transaction and payout data: Purchase and listing history, Wallet Funds balances, transaction logs, payout requests, holds, reserves, and review records. Card details for top-ups are processed by Whop and do not touch our servers.

Payout-recipient data: For an enabled method you select, account-holder name and only the recipient details needed for that payout, such as a PayPal email, GCash number and city, Wise or bank-transfer details, or a confirmed crypto destination. We restrict access to this information and do not expose full destinations in ordinary lists.

Loyalty & Rewards Data: Cakes balance, prize-draw entry counts, referral codes and credits earned, flash-event participation records.

Usage Data: Pages visited, search queries, listing views, IP address, browser type, device information, and session data.

User-Generated Content: Listings, messages, reviews, trade requests, want-to-buy posts, shop profile details, and social media video links submitted via the #petbakery programme.

3. How We Use Your Information

We use your information to operate the marketplace, process payments and payouts, review payout destinations, administer the Cakes loyalty programme and giveaways, send transactional notifications, detect and prevent fraud, provide customer support and resolve disputes, and comply with legal obligations.

We do not sell your personal information to third parties.

4. Loyalty & Rewards (Cakes)

The Cakes loyalty programme lets you earn in-platform points through purchases, referrals, and participation in events.

  • No cash value: Cakes cannot be exchanged for real money.
  • Pity system: Your pity counter is stored server-side only and is never shared publicly.
  • Expiry: Cakes may be forfeited after 12 consecutive months of account inactivity.
  • Prize fulfilment: Roblox-based prizes are delivered in-game via your linked Roblox username.

5. Social Content & Referrals

If you submit a TikTok or YouTube video link through the #petbakery social content programme, we store your video URL and submission details. Pet Bakery may re-share approved videos on our own social channels with attribution. We do not access your social media account credentials.

For referrals, we record the referral code and the referring/referred user IDs, used solely to apply referral credits.

6. Third-Party Services

  • Whop — Wallet top-ups. See Whop's Privacy Policy.
  • PayPal — Optional seller payout method. We use the verified payout email and account-holder information needed to send earned seller balance.
  • Wise, GCash, and banking partners — Optional seller payout routes. We process the recipient account, contact, or bank-transfer information needed to arrange a manual payout.
  • Blockchain networks and wallet providers — Optional manual crypto payouts use only the enabled rail shown in the dashboard. We keep the destination, quote, and transfer record needed to review and document the payout; sent transfers are irreversible.
  • Google OAuth — Optional sign-in. We receive your name, email, and profile picture. See Google's Privacy Policy.
  • Discord OAuth — Optional sign-in. We receive the stable Discord user ID, username or display name, profile image where available, and the email address only when Discord reports it as verified. Used to authenticate you, support account linking, and protect accounts. We do not retain Discord access or refresh tokens after sign-in. See Discord's Privacy Policy.
  • OpenAI — Powers our AI Assistant and market-trend research tool. See OpenAI's Privacy Policy.
  • Resend — Transactional and notification email delivery.

7. Cookies & Local Storage

We use session cookies to keep you logged in and to maintain your preferences. We do not use third-party advertising cookies or tracking pixels.

Affiliate attribution cookie (pb_ref): When you visit via a creator's referral link, we set a first-party cookie named pb_ref that expires after 30 days. It is used solely to attribute purchases to the referring creator. No personal data is shared with creators — they only see aggregate statistics.

8. Push Notifications

If you opt in to browser push notifications, we store your push subscription endpoint and encryption keys to deliver real-time alerts. You can disable push notifications at any time from your account menu.

9. Data Retention

We retain your account data for as long as your account is active. Transaction records, payout-recipient snapshots, payout review records, and financial logs may be retained for up to 7 years for accounting, fraud prevention, dispute resolution, and legal compliance. If you delete your account, your personal information will be removed from active systems within 30 days, except where retention is required by law.

10. Your Rights

Depending on your location, you may have the following rights: Access (request a copy of your data), Rectification (correct inaccurate data), Erasure (delete your account and data), Opt-out (unsubscribe from marketing emails), and Data portability.

California residents (CCPA): You have the right to know what personal information we collect and to request deletion. We do not sell personal information.

EU/UK residents (GDPR): Our legal basis for processing your data is contract performance and legitimate interests (fraud prevention, platform security). You also have the right to lodge a complaint with your local data protection authority.

11. Security

We use HTTPS encryption, hashed passwords, authenticated API endpoints, and role-restricted access to protect your data. Full payout-recipient details are accessed only when needed to review or complete a payout, and are not exposed in ordinary lists, exports, or notifications.

12. Buyer & Seller Protection Data

When you place or fulfill an order, we process and store delivery Roblox usernames, optional delivery screenshots, dispute records (retained 12 months after resolution), seller strike counts and expiry dates, and rolling reserve amounts per order.

This data is processed on the basis of our contractual obligation to facilitate safe transactions and our legitimate interest in preventing fraud and chargebacks.

13. Children's Privacy (COPPA)

Pet Bakery is intended for users aged 13 and over, consistent with Roblox's minimum age policy and COPPA. We do not knowingly collect personal information from children under 13.

If you believe your child under 13 has created an account, please contact us immediately via the data-request form on the Privacy page or through the Help section.

14. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, contact us through the AI Assistant or Help section on the platform, or email us at support@petbakeryofficial.com. Commercial rules for Wallet Funds, seller payouts, and fees are in our Terms of Service and Payouts & Fees guide.