BloxPassDashboard →

Privacy Policy

Last updated: October 1, 2026

This Privacy Policy describes how Bana Marketing LLC ("BloxPass", "we", "us" or "our") collects, uses, discloses and protects personal information in connection with the BloxPass website and services (the "Service").

We never receive your Roblox password, and we do not sell your personal information.

1. Scope

This Privacy Policy applies to personal information we process when you use the Service. It should be read together with our Terms of Service. Capitalized terms not defined here have the meanings given in the Terms of Service. Questions may be directed to support@bloxpass.com.

2. Information We Collect

2.1 Information received from Roblox

You sign in using the official Roblox OAuth 2.0 / OpenID Connect service. We request only the openid and profile scopes. Roblox provides us with your user ID, username, display name, avatar image, profile URL and account creation date. We do not receive your password, email address, telephone number, Robux balance or inventory, and we do not retain Roblox access tokens after sign-in is complete.

2.2 Information generated through your use of the Service

  • Account and Balance data: your Balance, a ledger of Balance changes, Hourly Jackpot entries, Daily Reward claims, redemption requests (including Gamepass identifiers), and gift card codes delivered to you.
  • Offer data: Offers you open on the Service; and, when TapRain reports a completed or reversed Offer, the Offer name and identifier, click and conversion identifiers, payout, and the country, device type and IP address recorded for that completion.
  • Affiliate data: if you join the affiliate program, your referral code, the users you referred and your commissions; and, if you arrived through a referral link, the identity of the referring affiliate.
  • Technical data: IP address, browser and device information, and timestamps collected when you sign in and make requests to the Service.
  • Discord data: if you link your Discord account, your Discord user ID and username; and, for members of our Discord server, the number of messages you send and the resulting XP and level, your PassPoint balance and transactions, chat event entries, and whether you boost the server. Our bot reads messages only to count them and to remove spam; we do not store the content of your Discord messages.
  • Communications: messages you post in global chat and messages exchanged with our staff through the support feature.

3. How We Use Information

We use personal information for the following purposes:

  • to provide and operate the Service, including authenticating you, maintaining your Balance, crediting Offers, and processing redemptions, Hourly Jackpot prizes, Daily Rewards and affiliate commissions;
  • to detect, investigate and prevent fraud and abuse, including multiple accounts, VPN or automated use, and chargebacks, and to enforce our Terms of Service. This may involve automated checks that result in payouts being held or Accounts being suspended; you may request human review by contacting us;
  • to maintain the security and integrity of the Service, diagnose technical issues and understand how the Service is used;
  • to communicate with you regarding your Account and to respond to support requests; and
  • to comply with legal obligations and to establish, exercise or defend legal claims.

Where the EU or UK General Data Protection Regulation applies, we rely on the following legal bases: performance of our contract with you; our legitimate interests in operating a secure, fraud-free Service; compliance with legal obligations; and your consent, where requested.

4. How We Disclose Information

  • Offer Partner (TapRain). We transmit your Roblox user ID as the s1 identifier when loading Offers so that TapRain can display Offers you have not completed and report completions to us. Offers are loaded directly from TapRain in your browser; accordingly, TapRain receives your IP address and device information in order to display Offers available in your country and on your device. When you open an Offer, TapRain and the relevant Advertiser collect information under their own privacy policies.
  • Advertisers. We do not provide your Roblox profile to Advertisers. Advertisers receive only the information you provide to them directly when completing an Offer.
  • Service providers. We share information with providers of hosting (Cloudflare), database (Supabase), automated bot protection (Cloudflare Turnstile, which evaluates browser and device signals to distinguish people from automated traffic) and other infrastructure services, who process it on our behalf under contractual obligations.
  • Roblox. Gamepass purchases for Robux withdrawals take place on Roblox and are subject to the Roblox privacy policy.
  • Affiliates. An affiliate who referred you may view your Roblox username and the commission generated by your activity, but not your Balance or redemptions.
  • Other users. Your username is displayed alongside messages you post in global chat. The public "Live" activity feed and PassBot may display a partially obscured form of your username (for example, "Bu***an") and your Roblox avatar image, together with a description of the activity, when an Offer is credited to you, a redemption is completed, you win the Hourly Jackpot, you claim a Daily Reward, or you first join the Service.
  • Discord server. If you link your Discord account, other members of our Discord server can see your rank role, and your level, message count and PassPoint balance through bot commands. Your earnings are shown only when you choose to share them with the /stats command. Staff can see which BloxPass account a Discord account is linked to. Our server's live feed shows the same partially obscured usernames as the Service. Discord processes your use of Discord under its own privacy policy.
  • Legal and safety. We may disclose information where required by law, or where we believe disclosure is necessary to investigate fraud, protect users or enforce our Terms of Service.
  • Business transfers. In connection with a merger, acquisition or sale of assets, personal information may be transferred to the successor entity subject to this Privacy Policy.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

5. Cookies and Similar Technologies

We use only the following strictly necessary cookies:

  • bp_session: maintains your signed-in session (7 days).
  • bp_oauth: protects the sign-in process against forgery (10 minutes).
  • bp_ref: records the affiliate referral link you arrived from until you sign in (30 days).
  • bp_human: records that you recently passed our automated security check (12 hours).

We may also store non-essential preferences in your browser's local storage (for example, whether the Daily Reward notice has been shown today). TapRain and Advertisers may set their own cookies when you open Offers.

6. Data Retention

We retain Account data for as long as your Account remains active. Balance ledgers and records relating to Offers, redemptions and fraud are retained for up to five (5) years following Account closure, as necessary for accounting, chargeback and fraud-prevention purposes. Technical logs are retained for shorter periods. When personal information is no longer required, we delete or anonymize it.

7. Children's Privacy

The Service is not directed to children under the age of 13, and we do not knowingly collect personal information from them. Users under the age of 18 require the consent of a parent or legal guardian. Many Offers are restricted to adults. If you believe that a child under 13 is using the Service, please contact support@bloxpass.com and we will delete the relevant Account.

8. Your Rights and Choices

  • You may revoke BloxPass's access at any time from your Roblox account settings (Settings → Security → Third-party app permissions).
  • Depending on your jurisdiction, you may have the right to access, correct, delete or port your personal information, and to object to or restrict certain processing. To exercise these rights, contact support@bloxpass.com from a means of contact we can verify, or contact us through the Service while signed in. We may retain certain information where permitted or required by law, including fraud-prevention and financial records.
  • Residents of the European Economic Area and the United Kingdom may lodge a complaint with their local data protection authority. California residents have rights under the California Consumer Privacy Act, as amended, and will not be discriminated against for exercising them.

9. Security

Sign-in is performed through Roblox OAuth with PKCE. Sessions are maintained using signed, HTTP-only cookies, and our database is accessible only from our servers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Where required by law, we will notify you of any breach affecting your personal information.

10. International Transfers

Our service providers may process personal information in the United States and other countries. Where required, we implement appropriate safeguards for such transfers, such as standard contractual clauses.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will revise the "Last updated" date above and, for material changes, provide notice on the Service.

12. Contact Information

Questions or requests regarding this Privacy Policy may be directed to support@bloxpass.com.

This site is independent and is not affiliated with, sponsored, endorsed, or approved by Roblox Corporation.