Privacy Policy

This policy covers three groups: (a) account holders who sign up and create cases; (b) viewers who open a case link; and (c) participants — Roblox users named in a case as a host, defendant, or witness, who may not themselves be account holders.

Account information. When you create an account we collect your email address, a display name, and a password. Passwords are handled and stored by Firebase Authentication (Google) — we never see or store your raw password.

Roblox identity. To use the Service you link a Roblox account by proving ownership. We store your Roblox user ID, username, and display name.

Content you provide. Cases you create, including case details, timestamp bookmarks, uploaded evidence footage and files (images, chat logs, documents, blueprints, maps), and the Roblox participants you add.

View data. When a case is opened we record a viewing event to count and de-duplicate views. We store a one-way hash of your IP address (not the raw IP) plus the first and last time that hash viewed the case. If you are signed in while viewing, we also store your Roblox identity (ID, username, display name) against that view so the case owner can see who viewed their case.

Cookies. We set a single, strictly-necessary exhibitly_session cookie (httpOnly) to keep you signed in. We do not use advertising or third-party analytics cookies.

Cases name Roblox users as hosts, defendants, or witnesses. For each we store and publicly display their Roblox username, user ID, display name, avatar headshot, and a link to their public Roblox profile. This information comes from Roblox’s public profile data and is added by the account holder who created the case — not necessarily by the person named.

If you have been named in a case and want your Roblox identity removed, contact us at sinzzs04@gmail.com with the case link and the username in question, and we will review and remove it where appropriate.

• To provide the Service: authenticate you, create and show cases.
• To display participant panels, evidence, and viewer counts.
• To de-duplicate and tally case views via the hashed IP.
• To keep the Service secure and prevent abuse.
• To respond to your requests and removal reports.

A case page and the information on it are publicly viewable by anyone with the link: the footage, evidence, participant list, and the list of viewers who were signed in when they opened it. Do not upload anything you are not comfortable making public.

We rely on the following providers to operate the Service:

• Google Firebase — authentication, database (Firestore), and file storage for uploads.
• Roblox — to look up public profile data, usernames, and avatar headshots.
• YouTube and Medal.tv — when a case uses an embedded clip, their players load from those services and may process data per their own policies.
• Google Fonts — to deliver page fonts.

We do not sell your personal information. We may disclose information if required by law or to protect the Service and its users.

We keep account and case data while your account is active. You may request deletion of your account and the cases you own by contacting sinzzs04@gmail.com. Some records may persist briefly in backups before being overwritten.

Exhibitly is not intended for anyone under 13. You must be at least 13 years old to create an account or use the Service. If you believe a child under 13 has provided us personal information, contact sinzzs04@gmail.com and we will delete it.

Depending on where you live, you may have the right to access, correct, or delete your personal information, or to object to certain processing. To exercise these rights, contact sinzzs04@gmail.com.

We use reputable providers (Firebase) and reasonable safeguards to protect your information, but no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above. Continued use of the Service after a change means you accept the updated policy.

Questions or requests: sinzzs04@gmail.com. See also our Terms of Service.