What changed in 1.2: fuller list of what purchase records contain; the automated tools we use for support answers and animations; support-channel processing; compliance records; retention periods; age wording updated to Discord's minimum age; website notes. Version 1.1 (20 July 2026) is superseded.
This policy explains what personal data hRumble collects when you play, why, who we share it with, how long we keep it, and your rights. hRumble is operated by Rumbux Labs, the “data controller”. We handle personal data under UK data protection law (the UK GDPR and the Data Protection Act 2018).
Rumbux Labs is the controller of your personal data. Contact us at team@rumbuxlabs.com. Our address for service and full business details are in section 13 and in the Business Information section of our Terms of Service.
hRumble runs inside Discord, so most of what we hold comes from Discord and from your gameplay.
| Category | What it includes |
|---|---|
| Discord identifiers | Your Discord user ID and username/display name; the IDs and names of servers and channels where hRumble is used. |
| Gameplay data | Games played, results, XP, rank, $RumBux balance, lives, items and profile pictures, in-game transactions, gifts sent and received, and the activity needed to run the game. |
| Purchase records | For each purchase: an order reference, amount, currency, date, the Discord account credited, and — for purchases through PayPal — the payer name, email address, PayPal account ID and country that PayPal sends us. Payment card details are handled by the payment provider and never reach us. Purchases through Discord's store are made from Discord; we receive the entitlement and the Discord account, not your payment details. |
| Compliance and enforcement records | Records of transfers and gifts used to detect real-money trading, collusion and abuse; the acceptance of the no-real-world-prizes notice (account, display name, server, time); game titles that triggered a reminder and the confirmation given; flags raised by our monitoring and the outcome of our review; account freezes and their reasons. |
| Support communications | Messages you send us by email, in support tickets, and in the support and questions channels of the hRumble community server, and our replies — including answers generated with an automated assistant (section 04). |
| Game names and messages you enter | Text you type into the game — game titles, bump messages, and similar — which is stored with the game and, if you enable it, shown in the Rumble Portal hub. |
| Server settings | Configuration a server administrator sets for hRumble on their server, including the Portal listing (server name and invite) if enabled. |
We do not deliberately collect special-category (sensitive) personal data.
We do not sell your personal data. We do not share it with advertising networks, data brokers or third-party monetisation services. We use data obtained through Discord's API only to run hRumble, we do not contact you outside Discord using data gathered by the bot, and we do not use your messages to train AI models.
Some of our providers store or process data outside the UK (for example in the United States). Where that happens we rely on the safeguards UK data protection law requires — UK adequacy regulations, or the International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses — so your data keeps an equivalent level of protection.
| Data | Kept for |
|---|---|
| Gameplay and account data | While hRumble operates, or until you ask us to delete it (section 08). |
| Purchase and accounting records | 6 years after the purchase, as UK tax law requires. |
| Support communications and assistant logs | 24 months; the automated-assistant log 12 months. |
| Compliance and enforcement records | As long as needed to show that our controls work and to act on abuse; reviewed at least once a year and deleted when no longer needed. |
Under UK data protection law you can ask to: access a copy of your data; correct or delete it; restrict or object to certain processing; receive it in a portable form where that applies; and withdraw consent where we rely on it. To exercise any of these, email team@rumbuxlabs.com or open a support ticket on the hRumble community server. We respond within the time the law allows (usually one month). Deleting your account data removes your progress, balance and items; we may keep purchase records and enforcement records where the law or a legitimate interest requires it.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk. We would appreciate the chance to put things right first.
hRumble is available to anyone old enough to use Discord — 13, or the higher minimum age where you live. We do not knowingly collect personal data from anyone under 13. If we learn that we hold data from a child under the minimum age we will delete it. Parents or guardians with a concern can contact us using the details in section 13.
We take reasonable technical and organisational measures to protect personal data, including access controls and encryption of data at rest. No system is completely secure, but we work to protect your data and to respond appropriately, including telling you and Discord where the law or Discord's terms require it, if something goes wrong.
rumbuxlabs.com sets no cookies and uses no analytics. Fonts are served from our own site. Videos are embedded from YouTube and load only when you press play; from that point YouTube's privacy policy applies. Links to Discord and other sites lead to services with their own policies.
We may update this policy as hRumble develops. When we do, we change the version number and effective date at the top of this page, summarise what changed, and flag significant changes through the Service or our community channels.
For any privacy question or request: team@rumbuxlabs.com.
The data controller is Rumbux Labs, a trading name of Andrew James Eckersall, a sole trader established in England, whose address for service is First Floor, Swan Buildings, 20 Swan Street, Manchester, M4 5JW, United Kingdom. We are registered with the Information Commissioner's Office as a data controller under registration number ZC201127.