SkinCraft - Skins for Roblox

Effective date: 11 August 2026  ·  Last updated: 11 August 2026

This Privacy Policy explains how Koydam LLC ("Koydam", "we", "us", or "our"), a limited liability company registered in the State of Wyoming, United States, collects, uses, shares, and protects personal information.

It applies to:

• our websites, including koydam.com;
• our mobile and desktop applications published under the Koydam LLC developer account on the Apple App Store, Google Play, and other distribution platforms (each, an "App");
• our APIs and developer services; and
• our client and business communications.

We refer to all of these together as the "Services". If a particular App has practices that differ from this policy, a supplementary notice will be provided in that App or on its store listing, and that notice controls where it conflicts with this one.

1. Summary of our data practices

The table below summarises the categories of data our Apps may collect. Not every App collects every category — an App's store listing (Apple "App Privacy" and Google Play "Data safety") states what that specific App collects.

Data type	May be collected	Linked to you	Used for advertising
Contact information (name, email)	Yes, if you provide it	Yes	No
Device and advertising identifiers	Yes	Sometimes	Yes, with consent where required
Usage and interaction data	Yes	Sometimes	Yes, with consent where required
Diagnostics and crash reports	Yes	No	No
Purchase history (transaction records)	Yes	Yes	No
Coarse location inferred from IP address	Yes	No	Yes, with consent where required
Support messages and user content	Yes, if you send it	Yes	No
Payment card details	No	—	—
Precise GPS location	No, unless an App states otherwise and you permit it	—	—
Contacts, photos, microphone, health data	No, unless an App states otherwise and you permit it	—	—

We do not sell your personal information for money. Where we show personalised advertising, that activity may be treated as "sharing" for cross-context behavioural advertising under California law — see section 12.

2. Information we collect

2.1 Information you give us

• Contact details — your name, email address, company, phone number, and the content of your message when you use a contact form, request support, or email us.
• Account information — where an App offers an account, the credentials and profile details you supply.
• User content — files, text, images, or other material you create, upload, or submit within an App, to the extent that App stores it.
• Business information — for clients, the contact and billing details needed to deliver services and issue invoices.

2.2 Information collected automatically

• Device information — device model, operating system and version, language, region, screen characteristics, and app version.
• Identifiers — the Apple Identifier for Advertisers (IDFA), the Google Advertising ID (AAID), app-instance identifiers, and similar resettable identifiers. On iOS, the IDFA is accessed only if you grant permission through Apple's App Tracking Transparency prompt.
• Usage data — screens viewed, features used, session length and frequency, taps and in-app events, and referral or attribution data.
• Diagnostics — crash logs, stack traces, performance metrics, and error reports.
• Network information — IP address (from which an approximate city or country-level location may be inferred), and general connection details.
• Cookies and similar technologies — on our websites only; see section 9.

2.3 Purchase information

When you make an in-app purchase or subscribe, Apple or Google processes the payment, not Koydam. We do not receive or store your card number, bank details, or billing address. We receive a transaction or purchase token, the product purchased, the purchase and expiry dates, and the subscription status, which we use to unlock and maintain your entitlement. Payments made directly to us for client services may be processed by a payment provider or by bank transfer, in which case that provider handles the payment details under its own privacy policy.

2.4 Information from third parties

We may receive aggregated performance and attribution data from advertising networks, analytics providers, and the app stores (for example, download counts, crash rates, and aggregate revenue reporting). We may also receive information you choose to share through a third-party sign-in service, limited to what that service discloses to us.

3. How we use information

• To provide, operate, and maintain the Services, and to deliver features you request.
• To process and validate in-app purchases and subscriptions, and to restore purchases across your devices.
• To display advertising, including personalised advertising where you have consented and non-personalised advertising otherwise.
• To measure performance, diagnose faults, and improve stability, usability, and content.
• To respond to enquiries, provide support, and communicate about service changes.
• To detect, prevent, and investigate fraud, abuse, security incidents, and violations of our Terms of Service.
• To comply with legal obligations, including tax, accounting, and record-keeping requirements.

We do not use your personal information to make decisions producing legal or similarly significant effects about you through solely automated means.

4. Legal bases for processing (EEA and UK)

If you are in the European Economic Area, the United Kingdom, or Switzerland, we process personal data on the following legal bases:

• Consent — for personalised advertising, non-essential analytics, and any optional device permissions. You may withdraw consent at any time (see section 11).
• Performance of a contract — to deliver an App or service you have requested, and to fulfil purchases and subscriptions.
• Legitimate interests — to secure our Services, prevent abuse, understand aggregate usage, and improve our products, balanced against your rights and freedoms.
• Legal obligation — to meet tax, accounting, and regulatory requirements, and to respond to lawful requests.

5. Advertising and Google AdMob

Some of our Apps are supported by advertising. We use Google AdMob, a service provided by Google LLC, and may use additional advertising networks or mediation partners disclosed in section 8.

5.1 What advertising partners may collect

Our advertising partners may collect and process your advertising identifier, IP address, device and operating system information, coarse location inferred from your IP address, and information about your interaction with advertisements (impressions, clicks, and conversions). This information is used to select, deliver, cap the frequency of, measure, and report on advertising, and to detect invalid traffic and fraud.

Google's use of information from apps that use its services is described at policies.google.com/technologies/partner-sites, and Google's own privacy policy is at policies.google.com/privacy.

5.2 Personalised and non-personalised advertising

Personalised advertising uses your advertising identifier and inferred interests to select ads that may be more relevant to you. Non-personalised advertising is based on contextual signals such as the App content and coarse location, and still uses a limited identifier for frequency capping, aggregate reporting, and fraud prevention.

Where consent is required — including in the EEA, the UK, and Switzerland — we present a consent message using Google's User Messaging Platform before any personalised advertising is served. If you decline, we serve non-personalised advertising instead. On iOS, personalised advertising that relies on the IDFA additionally requires your permission through Apple's App Tracking Transparency prompt; if you decline that prompt, the IDFA is not accessed.

5.3 How to control advertising

• iOS — Settings → Privacy & Security → Tracking, to withdraw tracking permission per App or for all Apps.
• Android — Settings → Google → Ads, to reset or delete your advertising ID and to opt out of ad personalisation.
• In-App — where an App displays a consent message, you can reopen it from the App's privacy or settings screen to change your choice at any time.
• Google account-level controls — adssettings.google.com.

Opting out of personalised advertising does not remove advertising from an ad-supported App; it changes how ads are selected.

6. In-app purchases and subscriptions

Purchases and subscriptions made inside an App are processed by the platform operating the store — Apple for the App Store, Google for Google Play. Their terms and privacy policies govern the payment itself. We receive only the transaction records described in section 2.3, which we retain as proof of entitlement and for accounting purposes.

Subscription management, cancellation, and refunds are handled through your store account. Cancelling a subscription stops future renewals; it does not delete the personal information already associated with your purchases, which is retained as described in section 13.

7. APIs and developer services

If you use an API or developer service we provide:

• We issue and store API credentials associated with you or your organisation.
• We log request metadata — timestamp, endpoint, API key identifier, IP address, user agent, response status, and latency — to operate the service, enforce rate limits, bill for usage, investigate abuse, and maintain security.
• We may log request and response payloads in limited volumes for debugging and abuse investigation. You must not transmit sensitive categories of personal data through our APIs unless a separate written agreement expressly permits it.
• If you use our APIs to process personal data of your own users, you are the controller of that data and are responsible for having a lawful basis and providing your own privacy notice. We act as a processor and will process it only on your documented instructions, under a data processing agreement where one is required.

Our Apps and services also call third-party APIs to provide functionality. Where they do, only the data necessary for the requested feature is transmitted, and the relevant provider is listed in section 8.

8. Third-party services we use

We rely on the following categories of providers. The specific services used by a given App are stated on its store listing.

Provider	Purpose	Privacy policy
Google (AdMob)	Advertising, mediation, ad measurement	policies.google.com/privacy
Google (Firebase Analytics, Crashlytics)	Usage analytics, crash and performance reporting	firebase.google.com/support/privacy
Apple	App distribution, in-app purchases, App Analytics	apple.com/legal/privacy
Google Play	App distribution, in-app billing	policies.google.com/privacy
Hosting and infrastructure providers	Serving our websites, APIs, and backend services	Disclosed on request
Email and communication providers	Delivering support and transactional messages	Disclosed on request

9. Cookies and similar technologies

Our websites use a small number of cookies and equivalent storage mechanisms. Strictly necessary cookies keep sessions secure and remember your preferences; these cannot be disabled without breaking the site. Any analytics or advertising cookies are set only where you have consented, and you can change or withdraw that choice through your browser settings or any cookie banner presented to you. Our mobile Apps do not use browser cookies, but may use equivalent local storage on your device.

10. How we share information

We share personal information only as follows:

• Service providers — the providers listed in section 8 and comparable vendors, acting on our behalf and bound by contract to process data only for the purposes we specify.
• Advertising partners — as described in section 5, subject to your consent where required.
• App stores and payment processors — to complete and validate purchases.
• Professional advisers — accountants, auditors, and lawyers, under duties of confidentiality.
• Legal and safety — where required by law, regulation, legal process, or enforceable governmental request, or where necessary to protect the rights, property, or safety of Koydam, our users, or the public.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, in which case we will require the recipient to honour this policy or notify you of any material change.

We do not disclose your personal information to third parties for their own independent marketing purposes.

11. Your rights and choices

11.1 Everyone

You may contact us at hello@koydam.com at any time to request access to, correction of, or deletion of your personal information, or to ask a question about this policy. You may also control device permissions and advertising settings as described in section 5.3, and delete an App to stop further collection by that App.

11.2 EEA, UK, and Switzerland

Subject to the conditions in applicable law, you have the right to: access your personal data; have inaccurate data corrected; have data erased; restrict or object to processing, including objecting to processing based on legitimate interests; receive your data in a portable format; and withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal. You also have the right to lodge a complaint with your national supervisory authority.

11.3 California

See section 12.

11.4 Other jurisdictions

Residents of other US states with comprehensive privacy laws, of Canada, and of other jurisdictions granting comparable rights may exercise those rights by contacting us using the details in section 17. We honour verifiable requests regardless of where you live, to the extent we are able.

We respond to rights requests within the period required by applicable law, and within 30 days where no specific period applies. We may need to verify your identity before acting, and may decline requests where an exemption applies, in which case we will explain why.

12. California privacy rights

Under the California Consumer Privacy Act as amended by the California Privacy Rights Act, California residents have the right to know what personal information we collect and how we use and disclose it; to request deletion; to request correction; to opt out of the "sale" or "sharing" of personal information; to limit the use of sensitive personal information; and not to be discriminated against for exercising these rights.

In the twelve months preceding the date of this policy, we may have collected the categories of personal information described in sections 1 and 2, for the purposes described in section 3, from the sources described in section 2, and disclosed them to the categories of recipients described in section 10.

We do not sell personal information for monetary consideration, and we do not knowingly sell or share the personal information of consumers under 16 years of age. However, serving personalised advertising through our advertising partners may constitute "sharing" for cross-context behavioural advertising under California law. You can opt out by declining or withdrawing consent in an App's privacy settings, by using the device controls in section 5.3, or by emailing hello@koydam.com with the subject line "Do Not Sell or Share My Personal Information". Where our websites detect a Global Privacy Control signal, we treat it as a valid opt-out request for that browser.

We do not collect sensitive personal information for the purpose of inferring characteristics about you.

13. Data retention

We keep personal information only as long as necessary for the purposes it was collected for:

• Contact and support messages — for as long as needed to resolve your matter and maintain a record of our correspondence, then deleted on request.
• Analytics and crash data — in line with our providers' retention settings, ordinarily no longer than 14 months for event-level data.
• Advertising identifiers — retained by advertising partners under their own policies; resetting your advertising ID severs the link to previous activity.
• Purchase and invoice records — for the period required by tax and accounting law, ordinarily seven years.
• API logs — ordinarily up to 12 months, and longer only where needed for an active security or abuse investigation.

14. Security

We apply technical and organisational measures appropriate to the risk, including encryption in transit, access controls and least-privilege administration, hashed credentials, restricted administrative interfaces, and regular dependency updates. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you and the relevant regulators where required by law.

15. International transfers

Koydam is established in the United States, and our service providers may process personal information in the United States and other countries. These countries may not provide the same level of data protection as your own. Where we transfer personal data out of the EEA, the UK, or Switzerland, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses together with the UK International Data Transfer Addendum, and we assess whether supplementary measures are needed. A copy of the safeguards we rely on is available on request.

16. Children's privacy

Our Services are not directed to children under 13 (or under the applicable age of digital consent in your country, which is up to 16 in parts of the EEA), and we do not knowingly collect personal information from them. Where an App is directed to children or to a mixed audience, we configure our advertising partners for child-directed treatment, disable personalised advertising, and restrict data collection accordingly, in line with the Children's Online Privacy Protection Act ("COPPA"), Google Play's Families policy, and Apple's Kids Category requirements.

If you believe a child has provided us with personal information, contact hello@koydam.com and we will delete it promptly.

17. Changes to this policy

We may update this policy to reflect changes in our Services, technology, or legal obligations. We will revise the "Last updated" date at the top, and for material changes we will provide a more prominent notice — in the App, on our website, or by email where we have your address. Continued use of the Services after an update takes effect constitutes acceptance of the revised policy, except where your consent is required.

18. Contact us

For any privacy question or to exercise your rights:

• Email: hello@koydam.com
• Support: support@koydam.com
• Post: Koydam LLC, 30 N Gould St, STE R, Sheridan, WY 82801, United States

Koydam LLC is the controller of the personal information described in this policy, except where we act as a processor for a client as described in section 7.