Legal

Privacy Policy

What RoSession collects, why, how long it's kept, and how to get it deleted. In plain words.

Last updated October 26, 2026

Who this covers

RoSession (rosession.com) is an analytics service for Roblox games: free public statistics about Roblox experiences, and Developer Analytics for developers' own games. This policy covers two groups of people: developers, who sign in with Roblox and add their games, and players of games that use RoSession. For players, the developer of the game decides to use RoSession and controls which game data is sent; RoSession processes it on their behalf, to show them their dashboard.

What we collect from developers

Your Roblox account, from Log in with Roblox (scopes openid profile): user id, username, display name and avatar. We never see your Roblox password.
What you set up: your games (name, place id, and its public icon from Roblox), API key fingerprints (not the keys themselves), the members you add, your Discord webhook URL and alert settings, timeline notes, and the AI apps and tokens you connect (names and fingerprints only, plus when each was last used).
Roblox Ads, if you connect it: the read-only Open Cloud API key you paste (stored encrypted, used only to list your game's ad campaigns) and those campaigns as Roblox lists them (name, status, schedule, budget and targeting). Remove the key on the Ad campaigns page or delete it on Roblox at any time.
Account status: when you signed in, and whether the account is active, suspended or an administrator.
Your profile and follows: what you choose in Settings (a RoSession bio, links, a banner colour, a featured game, games or groups you hide from your profile), and the games, developers and groups you follow, and the Discord webhook for alerts about them if you add one. Your follow list is private; the number of people following a profile or game is shown publicly.
The Discord app, if you use its games (/guess, /daily, /predict): your Discord user id and display name, your scores and predictions, and the ids of the servers you played in (for server leaderboards). Your display name and score can appear on leaderboards. The stats commands store nothing about you.
Emails you send us, and, if you joined the old email waitlist, that email address.
Plan and Whop: if you buy Pro, your Whop membership id and Whop user id, whether the membership is active, whether it's set to cancel, and when the paid period ends. Your Roblox user id is attached to the Whop checkout so the payment reaches your account. We never see your card or payment details; Whop handles those. If you redeem a promo code, which code and when. Your settings (dashboard defaults, reduced motion) and any badges an admin gave you.

What games send about players

When a game runs the RoSession module, its servers send:

Roblox user id, username, display name, account age, Premium status, and the country Roblox reports for the player.
Each session's join and leave times, how they joined (search, friend, teleport…), and signals around leaving that work out a leave reason.
Device type and screen size, frame rate, ping, idle time, which menus were open, and script errors.
Gameplay events the developer chooses to send (for example quests, funnel steps, currency earned or spent, A/B test variants), and Robux purchases in the game.

RoSession doesn't collect chat messages, passwords, real names, email addresses, phone numbers, payment details or precise location. Players' devices never connect to RoSession: the game's server collects the data and sends it, so we don't receive players' IP addresses. Developers agree in our terms not to send that kind of personal information.

Public Roblox game stats and profiles

RoSession's public pages (the homepage, Games, Rankings, Trends, Studios and Compare) show information about Roblox experiences, from what Roblox shows publicly about each experience: names, descriptions, icons, genres, creators' public names and ids, and counts like playing, visits, favorites and likes, with RoSession's own snapshots of them over time.

Profile and group pages show what Roblox shows publicly about that creator: username, display name, avatar, bio, follower count, public games and the groups they own, looked up when someone opens the page and kept for about a day. If it's your profile, you can change how it looks or hide games in Settings, or email us to have the page removed.

It doesn't collect anything about individual players for these pages. If you ask RoSession to track a game, we keep a hashed form of your network address for a few days to limit how many games one visitor can add.

How it's used

To show a game's analytics to its owner and the members they add, and to send the alerts they turn on.
To run the service: keeping it secure, preventing abuse, fixing bugs, and site-wide totals (for example how many games are active).
To answer you when you contact us.

We don't sell personal information, show ads, or use any of it for advertising. A game's data is never shown to other developers. RoSession's administrators can open any game for support and moderation.

How long it's kept

Raw events, server heartbeats and errors: 7 days for games on the Free plan; for Pro games, 30 days by default, shorter if storage runs low (never under 7 days).
Sessions and servers: 30 days on Free; on Pro three times as long as raw events, at least 90 days.
Daily totals and per-player totals: as long as the game exists on RoSession.
Deleting a game deletes all of its data right away. Your account stays until you delete it in Settings.

Our providers may keep backups for a limited time after data is deleted.

Cookies

RoSession uses two cookies, both needed to sign in: rs_session keeps you signed in (30 days) and rs_oauth holds the sign-in handshake (10 minutes). There are no advertising or tracking cookies. Your browser's storage also remembers who's signed in for a few minutes (so pages load faster), which site banners you closed, and a new API key for the setup guide in the same tab.

Children

Many Roblox players are children. RoSession is a tool for developers, not for players, and it's built to avoid collecting contact details or anything that identifies a player outside Roblox. Developers are responsible for using it in line with Roblox's Terms of Use and Community Standards and the laws that apply to their game, including telling players or parents about analytics where that's required. If you're a parent and want a child's data deleted, see below.

Deleting your data

Developers can delete a game, and all of its data, in its Settings. In your account Settings you can download a copy of the data tied to your account, and delete your account for good: that removes your account, settings, profile, follows, the games you connected and their data, tokens, the Whop membership record, promo codes, badges and your sessions as a player. Roblox's own public data that RoSession shows for everyone (like your public games) stays. You can also email hello@rosession.com with your Roblox username.

Players (or their parents) can ask the game's developer, or email us with the Roblox user id or username. We'll delete that player's data from every game on RoSession within 30 days, and confirm by email. Depending on where you live you may have other rights over your data; ask and we'll help.

Security

Traffic is encrypted (HTTPS). API keys are stored only as fingerprints (Roblox keys you paste for ads or countdowns are stored encrypted), sign-in cookies are signed and can't be read by scripts, and the database isn't reachable from browsers. No system is perfectly secure, but if something goes wrong that affects your data, we'll tell you.

Changes and contact

If this policy changes, we'll update the date at the top, and tell signed-in developers about big changes. Questions: hello@rosession.com. RoSession is not affiliated with, endorsed by or sponsored by Roblox Corporation.