Legal

Privacy Policy

Last updated: 21 June 2026  ·  Effective date: 21 June 2026

1. Who We Are

Iron Drift is a Roblox game experience. For the purposes of POPIA, Iron Drift acts as the Responsible Party — the entity that determines the purpose of and means for processing your personal information.

This website is operated in connection with the Iron Drift Roblox game. We do not collect personal information through forms on this site — contact is by email only using the mailto: links provided. We use Google Analytics to understand how visitors use this site (see Section 4). Playing on Roblox is subject to Roblox's Privacy and Cookie Policy and related notices.

2. Information Officer

We have designated an Information Officer as required by POPIA. All data-related queries, requests, and complaints should be directed to:

3. What Personal Information We Collect

We may process personal information in the following situations:

Information	When / How	Purpose
Email address, name (if you provide it), and message content	You email us directly (e.g. privacy@irondriftgame.com or info@irondriftgame.com)	To respond to your enquiry and keep a record of the conversation
Technical data (e.g. IP address, browser type, date/time of request)	Automatically in standard web server or hosting logs, if enabled by our hosting provider	Security, troubleshooting, and basic operational statistics
Usage and device data (e.g. pages viewed, approximate location, browser/device type, button clicks such as "Play on Roblox")	Automatically via Google Analytics when you browse this website	Measuring site traffic and understanding how visitors find and use the site

We do not intentionally collect South African ID numbers, payment card details, biometric data, health information, or other special personal information as defined in POPIA Section 26 through this website.

Roblox: When you play Iron Drift on Roblox, Roblox and (where applicable) experience creators may process data under Roblox's policies. That processing is separate from this website.

4. Website Analytics and Cookies

We use Google Analytics 4 (provided by Google LLC) on this website to see how many people visit, which pages they view, and whether they click links such as Play on Roblox. This helps us improve the site and understand interest in the game.

What Google Analytics collects

When analytics is enabled, Google may collect information such as:

• Pages you visit on this website and time spent on them
• How you arrived at the site (e.g. search engine or social link)
• Device and browser type, screen size, and general location (usually city or region, derived from IP address)
• Interactions we track, such as clicks on the Play on Roblox button (including whether the click was in the navigation bar or main hero section)

Google Analytics does not give us your name, email address, or Roblox account details. Data is aggregated and used for statistical reporting.

Cookies and similar technologies

Google Analytics uses cookies and similar technologies to recognise your browser and distinguish new from returning visits. These are stored on your device. You can control or delete cookies through your browser settings. Blocking analytics cookies may not affect your ability to browse the site, but we will receive less accurate usage statistics.

You can also install the Google Analytics Opt-out Browser Add-on to prevent Google Analytics from collecting data about your visits to this and other sites that use Google Analytics.

Lawful basis and your choices

We rely on our legitimate interest (POPIA Section 11(1)(f)) in understanding how our website is used, provided that interest is not overridden by your privacy rights. If you object to this processing, contact our Information Officer (Section 2) or use the opt-out options above.

Google as a service provider

Google acts as an Operator processing analytics data on our behalf. Google's handling of data is governed by its own policies, including the Google Privacy Policy and Google Analytics Terms. Data may be processed in countries outside South Africa, including the United States, where Google maintains infrastructure.

5. Why We Collect It (Lawful Basis)

Under POPIA, we may only process personal information if at least one lawful ground applies. Depending on the situation, we rely on:

• Consent (s11(1)(a)) — Where you voluntarily email us and your message implies consent to us processing your address and content for that purpose.
• Legitimate interest (s11(1)(f)) — Operating and securing the website, measuring anonymous website usage through Google Analytics, responding to enquiries, and defending legal claims where appropriate.
• Compliance with a legal obligation (s11(1)(c)) — Where the law requires us to retain or disclose information.

6. Children's Personal Information

We define a "child" as any person under the age of 18, consistent with POPIA.

Website, analytics, and email

• If you are under 18, a parent or guardian should be involved before you email us, in line with POPIA Section 34.
• Parents or guardians may contact privacy@irondriftgame.com to ask questions or request deletion of information we hold from a minor's email.
• Google Analytics on this site is intended for aggregate statistics only and is not used to identify individual children. A parent or guardian may contact us to object to analytics processing in connection with a child's visit.

If we discover unauthorised data

If we become aware that we have received personal information from a child in a way that does not comply with POPIA, we will take reasonable steps to delete or restrict that information.

7. How We Use Your Information

We use personal information only for purposes that match why it was collected, including:

• Reading and responding to emails you send us
• Keeping internal records of correspondence where needed for follow-up or legal compliance
• Measuring website visits and engagement (including Play on Roblox button clicks) via Google Analytics
• Protecting the security and integrity of our website and systems (including reviewing logs where applicable)
• Complying with applicable law or regulatory requests

We do not sell personal information. We will not use your information for profiling or solely automated decision-making in relation to this site.

8. Sharing of Personal Information

We do not sell, rent, or trade your personal information. We may share it only in the following limited circumstances:

• Service providers (Operators) — Hosting, email, IT, or analytics providers (including Google LLC for Google Analytics) that process data on our behalf under instructions and appropriate safeguards (including POPIA-compliant arrangements where required).
• Legal obligation — If required by law, a court order, or a regulator.
• Protection of rights — Where reasonably necessary to protect the safety, rights, or property of Iron Drift, our users, or the public.

Any third-party operator we engage is expected to process your information only as needed for the service provided and to implement appropriate security safeguards.

9. Storage and Security

Your personal information is stored on secure servers. We implement reasonable technical and organisational measures to protect it against loss, unauthorised access, disclosure, or destruction, including:

• Encrypted data transmission (HTTPS) for this website where configured
• Access controls limiting who can access business email and systems
• Regular review of our data handling practices

No system is completely secure. In the event of a data breach that may adversely affect you, we will notify you and the Information Regulator as required by POPIA Section 22.

10. Retention Periods

Data Category	Retention Period	Reason
Emails and related correspondence	Typically up to 24 months after the last message, unless a longer period is needed for legal or operational reasons	Resolving enquiries and maintaining records
Server / access logs (if collected by hosting)	As determined by our hosting provider's configuration (often a rolling period such as 30–90 days unless extended for security incidents)	Security and diagnostics
Google Analytics data	As configured in our Google Analytics account (typically up to 14 months for event and user-level data, unless we shorten the period)	Website usage reporting and trend analysis

After the applicable retention period, data is securely deleted or anonymised.

11. Your Rights Under POPIA

POPIA grants you the following rights. To exercise any of them, contact our Information Officer at privacy@irondriftgame.com:

• Right of access (s23) — Request a description of the personal information we hold about you.
• Right to correction or deletion (s24) — Request that we correct or delete inaccurate, irrelevant, or unlawfully obtained information.
• Right to object (s11(3)) — Object to the processing of your personal information on reasonable grounds.
• Right to withdraw consent — Where processing is based on consent, you may withdraw it by contacting us. Withdrawal does not affect the lawfulness of processing before withdrawal.
• Right not to be subject to automated decisions — We do not make solely automated decisions about you.

We will respond to all verified requests within 30 days.

12. Complaints

If you believe we have processed your personal information unlawfully, please contact our Information Officer first so we can attempt to resolve the matter.

If you remain dissatisfied, you have the right to lodge a complaint with the Information Regulator (South Africa):

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Material changes may be highlighted by a notice on this website.

Continued use of this website after the effective date of any changes constitutes notice of the updated policy; where we rely on consent, we will obtain consent again if required by law.

14. Contact Us

For any privacy-related queries, requests, or concerns: