What the extension sends us

When you use the extension, it sends our servers:

• Your Roblox user ID and username, your RoGold account key and your RoGold session.
• Your Roblox sign-in tokens, if you sign in with Roblox. We never receive your Roblox password or your .ROBLOSECURITY cookie.
• Playtime: the experiences and Roblox Studio sessions you play, their genres, when a new session starts and your timezone.
• My Roblox: your account details, groups, friends, badges, notes, preferences and passport shares.
• What you write or make: feedback (with the page you were on, if you include it), reviews, reactions, reports, themes, outfits, images and profile widgets.
• Calendar plans, invitees, polls, availability and watchlists.
• Trading: trade ads, pending and completed trade snapshots and your portfolio.
• Purchases: checkout details, purchase verification, points and cosmetics. For a Robux purchase we may ask for your email.
• Searches and lookups: PowerSearch queries, the profiles you open, game server addresses and datacenters, benchmarks, badge ownership and X timeline requests.
• Receipts for notices you have seen, and anonymous counts of which features are used.

What only the website collects

• Card or bank details when you pay. These go straight to Stripe and we never see them.
• The email and password of a website account, and the codes we send to verify your email.
• An affiliate visitor ID, if you arrive through an affiliate link.

AI prompts

If you use RoGold AI credits, the prompt you write goes to our servers and on to our AI provider, Anthropic, to get an answer. The extension itself does not send AI prompts.

What stays on your device

These are handled in your browser and are not sent to us: your private messages and chat, the country of your Roblox account (used to pick a currency) and the content of the pages you view. Your Roblox cookie is read only with your permission, encrypted and handed to the RoGold desktop app on your own computer.

Network addresses

We use your network address only while a request is being handled, to apply rate limits and to enforce staff bans. We do not store raw IP addresses, and they are redacted from our logs, traces and error reports. For sharing detection and fraud checks we keep a keyed hash of the network prefix of your address. It is a derived value that cannot be turned back into your address.

Who helps us handle it

• Stripe takes payments for subscriptions and points. Chargebee still bills customers who subscribed before the move to Stripe.
• Cloudflare delivers the site and sees the requests that pass through it.
• Sentry receives error alerts. We redact personal details before they are sent.
• Anthropic answers AI prompts.
• Roblox handles sign-in and Robux purchases.
• Zoho Desk handles support tickets, SendGrid sends our emails and Axiom stores our logs.

How long we keep it, and deleting it

We keep your data while your account is active. We do not set a fixed expiry for it, so it stays until you ask us to delete it. Deleting is not always instant, as listed below.

Ask us and we delete your account and licence, playtime and game sessions, profile, badges and cosmetics, content you published, support conversations, Discord links, trades, calendar, points and rewards, devices and account sharing, developer activity, and feedback and reports. We also remove you from other people’s friend lists and trades and delete your entries in our logs.

Apart from the copies listed below, we keep only payment and refund records, because accounting and tax law requires it. We erase your name, email and account IDs from them first, leaving an amount, a date and the payment processor’s own reference.

Some copies go later or stay for a set reason:

• Support tickets and your contact record in Zoho Desk move to its recycle bin when we delete them, and Zoho removes them permanently after 60 days.
• Entries in our logs at Axiom are deleted on request. If Axiom has not confirmed yet, they still expire automatically when its log retention ends.
• Database backups are replaced on a rolling schedule. A backup taken before your request still holds your data until it expires. The length of that period is set in our systems and is told to you in our reply. Backups are kept out of use, and if one were restored we would erase your data from it again first.
• Email delivery records at SendGrid, our email provider, are not deleted by us. They expire on SendGrid’s own schedule.
• A separate suppression list keeps a one-way hash of your email address and name, and of your Roblox and Discord IDs, so we do not collect you again. It is a retained copy that deletion does not remove, and it is not readable as your details. To have your entry removed from it, write to [email protected] and we will remove it after confirming it is you.

Submit a deletion or data access request

You can also write to [email protected]. We confirm it is you before we delete anything.

Cookies

We use cookies to keep you signed in and to remember choices such as your language. Stripe and Cloudflare may set their own cookies for payments and security.

Read the Cookie Policy

Usage data

Feature counts are anonymous. Playtime and game-session tracking is not: it is tied to your Roblox user ID because it powers your stats, and it is deleted when you ask.

Children

RoGold is not for children under 13 and we do not knowingly collect their data. If you think a child has given us data, contact us and we will delete it.

Your rights

You can ask to see, correct, export or delete your data, or to object to how we use it. Under GDPR you can also complain to your data protection authority. California residents have equivalent rights under the CCPA. Use the request form or email above.

Changes and contact

We post changes to this policy on this page and update the date below. Questions go to [email protected].