2 more questions (yea my questioning might not end). I sent a Roblox support ticket about this and they said I have 30 days left to remove the player’s data (now 23) and here are my questions:
I didn’t replied to the support ticket. Is that fine?
Do I have to tell the support ticker that I removed the player’s data?
Is it sure that removing the player’s data from the game will comply the request because your first reply has the word “should” which makes me not sure that I finished this?
I’m not sure what Roblox uses as their backend for data stores, but from what I have observed, it looks like they are using am SQL server to do it (MySQL, Oracle, MS-SQL Server, etc…). The big clue is the use of keys. So with that, I disagree with your point 2. I think they CAN verify it if it comes down to it, but it would have to be at a much lower level of access than what we are given.
I do not doubt they have the means to attempt to verify it. They have access to all databases after all, and as such they can do whatever we can do to remove the data. What I meant was there is no use worrying about it since there is no cause for them to spend the time verifying it. The type of database does not matter, the request is not to delete any keys with the userid in it, it is to delete all keys containing data relevant to the user. So, if you were to store userid 1234 in the key abcd then roblox would have no way of knowing (apart from reading through your scripts). Alternatively, if you used a 3rd party server to decide the key then they would never be able to know.
I am saying “should” because I do not work for Roblox and can not know these types of things for certain. All of my understanding regarding this is from the wording of the request as well as reading other people dealing with these requests.
Not replying to the support ticket should be fine, but I do not know. Replying won’t do no harm so you might as well respond.
As stated, replying does no harm so you might as well respond to the support ticket.
I answered this above, however I would be very surprised if it did not comply, since the request is to delete their data, nothing else.