Legal & Policy

Privacy Policy

Effective April 6, 2026
Version 1.0

01

Overview

This Privacy Policy explains how Matter ("Matter", "we", "us", or "our") collects, uses, and protects your personal information when you use our services, products, and platforms — including himatter.xyz and any associated Roblox experiences, web applications, or communication channels.

By using any Matter service, you agree to the data practices described in this policy. If you do not agree, please discontinue use of our services.

The short version: we collect only what we need, store it securely in the United States, never sell it, and you're always in control of it. Matter staff cannot view or access your personal data without your explicit involvement.

02

Data We Collect

We collect only the minimum information necessary to operate our services reliably and securely. This may include:

Account & Identity

  • Your display name, email address, and profile picture (sourced from your chosen sign-in provider)
  • A unique MatterID assigned to your account upon registration
  • Your linked third-party identifiers (e.g. Discord user ID, Google account ID, Roblox user ID) where applicable
  • Account creation date, last login timestamp, and session tokens

Usage & Activity

  • Activation key redemption records tied to your MatterID
  • Audit log entries generated by actions you take within Matter services (e.g. settings changes, consent decisions)
  • In-experience data from Matter Roblox games, such as gameplay events or progress, where explicitly stated within those experiences

Communications

  • The content of support requests or enquiries you submit to us
  • Partner or developer application form submissions

What We Don't Collect

  • Payment or financial information of any kind — all purchases are handled directly by Roblox
  • Precise geolocation data
  • Any data beyond what is required to provide you with our services

03

Authentication & Sign-In Providers

Matter uses MatterID as its central identity platform. You may authenticate using one of the following sign-in providers, or directly via MatterID credentials:

MatterID

Matter's native identity system. Credentials are stored securely and encrypted at rest.

Google

OAuth 2.0 sign-in via Google. We receive only your name, email, and profile picture.

Discord

OAuth 2.0 sign-in via Discord. We receive only your username, avatar, and account ID.

When you sign in via Google or Discord, Matter receives only the profile information those providers share with us under their OAuth 2.0 consent flow — nothing more. We do not receive your passwords, payment methods, contacts, or any other data held by those platforms.

Each sign-in provider has its own privacy policy governing how they handle your data on their end:

You may revoke Matter's access to your Google or Discord account at any time through those platforms' connected applications settings. Doing so will require you to re-authenticate the next time you sign in.

04

How We Use Your Data

We use the data we collect solely to provide, maintain, and improve our services. Specifically:

  • To authenticate your identity and maintain secure sessions across Matter services
  • To associate your MatterID with activated products, features, or entitlements
  • To send service-related communications, such as MatterID Mass Notifications about policy changes or platform updates
  • To investigate and respond to support requests you initiate
  • To maintain audit logs for security and integrity purposes
  • To operate features you explicitly opt into, such as AI-assisted tools (e.g. Aurora), in accordance with your consent preferences

We do not use your data for advertising, profiling, behavioural targeting, or any purpose beyond what is necessary to operate Matter services.

05

Data Storage & Security

Where Your Data Lives

All Matter user data is stored exclusively within the United States. We do not transfer your personal data internationally or to servers outside of US jurisdiction.

How It's Protected

  • All data is encrypted at rest and in transit using industry-standard encryption (TLS for transport, AES-256 or equivalent for storage)
  • Authentication credentials stored within MatterID are hashed using secure, modern algorithms — plaintext passwords are never stored
  • Access to backend systems is restricted and governed by role-based access controls
  • Our infrastructure is regularly reviewed for security vulnerabilities

Staff Access

Matter staff and administrators do not have the ability to view, browse, or manage your personal data through our tools. Our internal admin systems are designed so that individual user data is not surfaced or accessible to staff unless you directly initiate a support interaction that requires it. Even then, access is limited to what is strictly necessary to resolve your issue.

Data Retention

We retain your data for as long as your account remains active or as needed to provide you with services. If you request deletion of your account, your personal data will be removed from our systems within a reasonable timeframe, except where retention is required by law or legitimate security purposes.

06

We Do Not Sell Your Data

Matter does not sell, rent, trade, or otherwise transfer your personal information to third parties for commercial purposes. This is an absolute commitment — not a qualified statement.

We do not engage in data brokerage, advertising partnerships, or any arrangement that would result in your personal information being shared with or sold to another party for their own use.

The only circumstances under which we may disclose your information to a third party are:

  • When required to do so by law, legal process, or a valid governmental request
  • To protect the safety, rights, or property of Matter, our users, or the public
  • In connection with a legitimate business transfer (e.g. merger or acquisition), in which case you will be notified in advance

07

Your Rights

You have full control over your personal data. At any time, you may:

  • Request a copy of the data Matter holds about you
  • Request correction of inaccurate or outdated information
  • Request deletion of your account and associated personal data
  • Withdraw consent for any optional data processing (e.g. AI features) via your myMatter settings
  • Revoke sign-in access for Google or Discord via those platforms' account settings

To exercise any of these rights, contact us at support@himatter.xyz. We will respond within a reasonable timeframe and will never penalise you for exercising your rights.

08

Third-Party Services

Certain Matter services integrate with or depend on third-party platforms. Each of these operates under their own independent privacy policies, which we encourage you to review:

Matter is not responsible for the privacy practices of these third-party platforms. Any data they collect independently of our services is governed solely by their own policies.

09

Policy Changes

We may update this Privacy Policy as our services evolve, as platform integrations change, or as legal requirements shift. The effective date at the top of this page will always reflect the most current version.

For significant changes — particularly those that affect how your data is collected or used — we will post an announcement via our Discord server or through a MatterID Mass Notification, giving you time to review before changes take effect.

Your continued use of Matter services after a policy update constitutes your acceptance of the revised terms.

10

Contact

If you have questions about this Privacy Policy, want to exercise your data rights, or have a privacy concern you'd like us to address, please reach out.

We aim to respond to all privacy-related requests within 5 business days. For issues relating to your Roblox account or purchases, please contact Roblox Support directly — they are best placed to assist with anything on their platform.