Privacy policy
gpovalues.com is an unofficial fan-made tool for tracking trade values in Grand Piece Online. We don't sell or share your information, and we don't use tracking ads.
What we collect
- Browser request logs — IP address, user agent, page visited. Rotated and deleted within 72 hours. Used only to operate the site (rate limiting, error diagnosis).
- Public Discord messages — our Discord bot reads messages in servers where a server administrator has explicitly invited it. We aggregate the content (items offered, wanted, quantities) into trade statistics. Individual author ids are hashed before public display and purged from aggregates within 30 days.
- Discord user ids you give us — when you use a bot feature that has to remember who you are (trade-board listings,
/invinventories, value votes and suggestions, giveaway entries), we store your Discord user id alongside that entry so the feature works and so a giveaway winner can be verified. That is the id only — no message history, no DMs, no email. Ask us in Discord and we will delete yours. - Discord sign-in (optional) — you only sign in to post on the trade board, send an offer or report a listing, or to send a trade on /log-trade (the /logtrade command in our Discord uses your Discord account directly); browsing values, the calculator and the board itself need no account. Sign-in goes through Discord and asks only for your basic profile (Discord's
identifypermission), so Discord never gives us your email, your password or your servers. We keep your Discord user id, display name and avatar, which are shown on your listings and offers; the date your Discord account was created, worked out from the id, to apply the minimum account age of the board and of logged trades; and when you first and last signed in. Signing in sets a sign-in cookie and a second cookie that only tells our pages you are signed in; signing out removes both. Posts and offers are counted per day against your Discord id and your IP address to limit spam. - Suggestions you send — on /suggest we keep what you write, the topic you picked, the page you came from, your site language, and a Discord name only if you type one. To stop spam and repeat votes we also keep a one-way keyed hash of your IP address, which cannot be turned back into the address; the address itself is not stored. For bug reports only, we keep your browser's user agent so we can reproduce the problem. Only our team reads suggestions: the public list on that page shows titles we write, never your text. Send us your suggestion code in Discord and we will delete it.
- Trades you log: on /log-trade (or with /logtrade in our Discord) you can send us screenshots of a finished trade from your in-game Past Trades list. How we handle it is explained in its own section below.
- Analytics — we use Cloudflare Web Analytics, which is cookie-free and doesn't track you across sites. We also run a self-hosted, cookie-free Umami instance on first-party paths for aggregate page-view and campaign-funnel measurement. No cookies are set, no personal identifiers are stored, and IP addresses are not persisted.
Trades you log with a screenshot
On /log-trade, or with the /logtrade command in our Discord, you enter a trade you finished in Grand Piece Online and add up to 8 screenshots of it from the in-game Trade Menu "Past Trades" list. We use them to check that the trade happened as you entered it, so the trade can count toward the values. Sending a trade needs a Discord sign-in (accounts at least 30 days old); adding screenshots before you sign in does not.
- The screenshot: stored privately on our own server and never shown to anyone outside our team. We remove hidden photo data (such as location and camera details) and shrink the image when it arrives. It is deleted automatically: within 7 days when the trade is counted, and within 2 to 14 days in every other case (for example, a screenshot you never submit, or a trade we could not count). Past Trades screenshots show the other player's Roblox name. We never store player names: the name is turned into a one-way keyed hash (HMAC) straight away, used only to stop the same two players from logging trades with each other over and over, and the name itself is thrown away.
- Checking the screenshots with AI: we send the screenshots to Anthropic, which runs the Claude AI model for us as a service provider. Anthropic processes them under its commercial terms, which do not allow it to train its models on the data we send. When you upload, a quick check asks only whether a screenshot shows the Past Trades list. After you send, the model compares the items and amounts you entered with the screenshots and reads how long ago the trade was ("N hours ago") and the other player's name, which we hash as described above and never keep.
- What we keep about the trade: the items and amounts on each side, the trade date worked out from the "N hours ago" line, the hashed other-player name (so the same trade is not counted twice and one pair of players cannot flood the values), the result of our check, a receipt code (it looks like T-ABCD2345), your site language and the page you came from. To limit spam we keep a one-way keyed hash (HMAC) of your IP address, which cannot be turned back into the address; the address itself is not stored.
- Your Discord sign-in: we keep your Discord user id and display name with the trade, so we can stop fake trades and you can see your trades on any device. Your name is shown publicly next to the trade only if you tick "Show my Discord name". It is off unless you turn it on.
- What is public: counted trades appear on item pages and on /log-trade as items, amounts and date only. Never the screenshot, never your IP, and never your name unless you chose to show it.
- Deleting a logged trade: send us your receipt code through /suggest (or in Discord) and we will delete the trade and anything left of its screenshot.
What we don't collect
- No email, password, or phone number. Browsing values and the calculator need no account; the only sign-in is the optional Discord sign-in, needed only to post on the trade board or to send a trade on /log-trade (or with /logtrade in Discord).
- No cookies for tracking or advertising.
- No personalized or behavioral ads. If we ever add ads, they will be contextual only and comply with kid-safe standards.
- No cross-site tracking. No third-party analytics.
COPPA and minors
Our audience skews young. We comply with the U.S. Children's Online Privacy Protection Act and the FTC's 2025 final rule. We don't knowingly collect personal information from children under 13 beyond the 72-hour request log. The suggestion box asks for no personal details, and its only name field is an optional Discord name (Discord accounts are 13+). Logging a trade needs a Discord sign-in (Discord accounts are 13+) and asks for no other personal details; player names in screenshots are never stored, and screenshots are never published and are deleted within 14 days at most. If you believe we have, contact [email protected] and we'll delete it immediately.
GDPR and CCPA
If you are in the EU or California, you have the right to request access to, correction of, or deletion of any data we have about you. Since we don't collect real names or email addresses, the practical reach is narrow, but any Discord user whose messages were parsed can email us and have the derived data purged. Legal basis: legitimate interests (Article 6(1)(f) GDPR) for operating a public trade-value aggregator.