Privacy policy
Last updated 10 October 2026
This policy explains what personal information Garml collects through garml.com, our Roblox games and our support email, why, and what you can ask us to do with it. Shelf Rescue has its own privacy policy.
Who we are
Garml is a brand of ONEROCK GROUP LTD, a company registered in England and Wales (number 17014989), with its registered office at 71–75 Shelton Street, Covent Garden, London WC2H 9JQ. We are registered with the Information Commissioner's Office (ICO), reference ZC257607. We are the controller of the personal information described here.
For anything about your personal information, email privacy@onerockgroup.co.uk.
This website
garml.com doesn't use cookies, analytics, advertising or tracking, and it doesn't load anything from other companies' servers.
Like every web server, ours keeps standard logs (IP address, browser type, the page asked for, date and time) to keep the site secure and fix faults. We keep them for up to 30 days. Our legal basis is our legitimate interest in running a secure website.
Links to Roblox take you to roblox.com, which has its own privacy policy.
Our Roblox games
Steal a Pumpkin and Zero Hour Fleshbound run on Roblox. Your Roblox account, chat, friends and purchases are handled by Roblox under Roblox's privacy policy.
To save your progress, our games store game data, such as your pumpkins, cash, unlocks and settings, against your Roblox user ID using Roblox's own storage. Leaderboards show Roblox usernames. We don't receive your real name, email address or payment details from Roblox.
We use this game data to run the games: saving your progress, delivering items you buy, running leaderboards and fixing problems. Our legal basis is our legitimate interest in providing the games you choose to play. We keep it while the game is running and delete it when you ask us to, or when Roblox passes on a deletion request from you.
When you email us
If you email support@garml.com or hello@garml.com, we receive your email address and whatever you include, such as your Roblox username or a screenshot. We use it only to reply and fix the problem, and keep it for up to 2 years after our last contact. Our legal basis is our legitimate interest in answering you.
Who we share it with
- Roblox, which runs our Roblox games and stores their game data.
- Our hosting provider, which runs the server for this website.
- Google, which provides our business email (Google Workspace). Google may process data outside the UK; where it does, it uses safeguards approved under UK data protection law.
We never sell your information. We may share it if the law requires it, or to protect someone's safety.
Your rights
Under UK data protection law you can ask us to:
- give you a copy of the personal information we hold about you;
- correct information that is wrong or incomplete;
- delete your information;
- restrict how we use it, or object to us using it;
- send it to you or another organisation in a common format.
Email privacy@onerockgroup.co.uk to make a request. It's free, and we'll reply within one month. We may need to confirm who you are first.
Complaints
If you're unhappy with how we've handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
Children
Many Roblox players are young. We collect as little as we can: no names, no email addresses through the games, and no tracking on this website. If you're under 13, please ask a parent or carer to email us for you. Parents can ask us to delete their child's game data at privacy@onerockgroup.co.uk.
Changes to this policy
If we change how we use personal information, we'll update this page and the date at the top.