Luis Thomas, Germany. Email: privacy@7l.software — this is the fastest way to reach us about anything on this page, and we will provide our postal address on request. We are a one-person operation and are not required to appoint a data protection officer, so there is none.
Warden is used in two ways, and the roles differ.
Warden is the internal moderation system for the 7L games on Roblox. It records who was banned, when, and why, so that bans can be enforced across our games, reviewed later, and lifted if they were wrong. The records are not public and there is no public ban list.
When a moderator signs in to the dashboard we also process their Discord user ID, Discord username and their roles in our Discord server.
Usernames and display names come from Roblox's public API (Art. 14 GDPR). Everything else is created by the moderation decision itself or by the anti-cheat system inside the game.
The legal basis is Art. 6(1)(f) GDPR, legitimate interests. Ours are: protecting other players from cheating, harassment and manipulated software; enforcing a ban across our games rather than letting someone move to the next one; and keeping decisions reviewable so an objection can actually be examined. A ban with no record cannot be checked or reversed. Our balancing assessment is written down; the fact that some players are minors was taken into account and is why retention is short and ban reasons stay factual.
Discord and Roblox are based in the United States. Those transfers rely on the EU-US Data Privacy Framework or on standard contractual clauses under Art. 46(2)(c) GDPR. The database itself stays in the EU.
| Temporary ban | ban duration + 6 months |
| Lifted ban | 1 year after it was lifted |
| Permanent ban | until lifted, then 1 year |
| Moderation log | 2 years |
Deletion runs automatically once a day. For technical reasons deleted records can persist in Cloudflare's backups for up to 30 days.
You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18) and data portability (Art. 20). Because we rely on legitimate interests, you also have the right to object under Art. 21 GDPR.
While a ban is in force or an objection to it is being examined, we may refuse erasure under Art. 17(3)(e) GDPR, because the record is needed to defend the decision against legal claims. We answer within one month either way and give reasons if we refuse.
Write to privacy@7l.software. Include your ban ID if you have one, so we can find the record. You can also complain to a data protection authority; for us that is the Berliner Beauftragte für Datenschutz und Informationsfreiheit.
One cookie, set only after a moderator signs in to the dashboard. It keeps the session alive, expires after at most eight hours, and cannot be read by scripts in the browser. It is strictly necessary under § 25(2) no. 2 TDDDG, so we do not ask for consent. There is no analytics, no advertising, no tracking, and no external fonts, scripts or embeds anywhere on this site.
If you sign in to the dashboard as a moderator, we are responsible for your account data: your Discord user ID, username, roles in the relevant Discord server, session times, and a log of the moderation actions you take. The legal basis is Art. 6(1)(b) GDPR for running the account and Art. 6(1)(f) for keeping the log honest. Sessions expire after at most eight hours; action logs are kept for two years.
If a studio subscribes to Warden, we are also responsible for its billing data. Payment is handled by our payment provider, who is the seller of record and receives the payment details directly; we do not store card numbers.
The dashboard requires a Discord sign-in and a moderator role. Every moderation action is logged. Game access keys are stored only as hashes. All traffic is encrypted.