Legal
Privacy Policy
Last updated 25 July 2026
What we collect, why we collect it, and how to make us delete it. The short version: your email, your Roblox username, a password we can't read, and your IP address for fraud checks. We don't sell any of it.
What this covers
This policy explains what Zexora collects about you, why, who we share it with, and how to get it back or get it deleted. It applies to zexora.cc and its subdomains.
Zexora was previously operated as BloxQuick. Data held under that name is covered by this policy.
What we collect
You give us:
- Your Roblox username — so we know who you are and where a gift code should go
- Your email address — your login, and where cashouts are sent
- A password you create for Zexora. We store it only as a salted hash and can never read it. We never collect your Roblox password.
- Anything you write to support
We record automatically:
- Your IP address, at signup and at each login, along with the time
- Basic device and browser information (user agent)
- Which tasks you started and completed, what they credited, and the reference the advertising network gave for each one
- Your cashout history and the codes issued to you
We keep IP and device records specifically to detect people running multiple accounts to hit the same offer repeatedly, which is the main fraud we face. We don't use them to build a profile of you for advertising.
Why we hold it
- To run your account and log you in
- To credit tasks and to pay you
- To detect and prevent fraud against us and against our advertisers
- To answer your support messages
- To meet legal and accounting obligations
How long we keep it
- Account details: while your account is open
- Task, credit and cashout records: 6 years after the transaction, because we need them for accounting and for chargeback disputes
- IP and login records: 12 months, then deleted
- Support messages: 2 years
Your rights
Email support@zexora.cc from your account address and you can:
- Get a copy of everything we hold on you
- Correct anything wrong
- Have your account and personal data deleted. Cash out first — deletion forfeits any remaining balance. We keep the minimum transaction record the law requires for accounting, stripped of your contact details.
- Object to us processing your data, or ask us to restrict it
We'll respond within 30 days. If you're in the UK, EU, or another region with a data protection authority, you can complain to them if you're not satisfied with how we've handled a request.
Children
Zexora is not for children under 13. We do not knowingly collect data from anyone under 13.
If you are a parent or guardian and believe your child under 13 has an account, email support@zexora.cc and we will delete the account and its data promptly and without argument. You do not need to prove anything beyond identifying the account.
If you are between 13and 17: talk to a parent before you sign up, and be careful what you hand over to advertisers inside individual offers. We can protect the data you give us — we can't protect what you type into someone else's form.
Security
The site is served over HTTPS. Passwords are stored as salted hashes using a modern password hashing function, never as readable text. Administrative access is limited to accounts that need it, and actions taken on user accounts are logged.
No service is perfectly secure. If we ever suffer a breach affecting your data, we will email you and the relevant authority without undue delay and tell you what was taken.
Changes and contact
If we change this policy in a way that materially affects you, we'll email the address on your account before it takes effect. The date at the top always reflects the current version.
For anything in this policy, including data requests: support@zexora.cc.