Privacy Policy
What RoSession collects, why, how long it's kept, and how to get it deleted. In plain words.
Last updated October 19, 2026
Who this covers
RoSession (rosession.com) is an analytics service for Roblox games: free public statistics about Roblox experiences, and Developer Analytics for developers' own games. This policy covers two groups of people: developers, who sign in with Roblox and add their games, and players of games that use RoSession. For players, the developer of the game decides to use RoSession and controls which game data is sent; RoSession processes it on their behalf, to show them their dashboard.
What we collect from developers
- Your Roblox account, from Log in with Roblox (scopes openid profile): user id, username, display name and avatar. We never see your Roblox password.
- What you set up: your games (name, place id, and its public icon from Roblox), API key fingerprints (not the keys themselves), the members you add, your Discord webhook URL and alert settings, timeline notes, and the AI apps and tokens you connect (names and fingerprints only, plus when each was last used).
- Account status: when you signed in, your place on the waitlist, and whether the account is approved or suspended.
- Emails you send us, and, if you joined the old email waitlist, that email address.
What games send about players
When a game runs the RoSession module, its servers send:
- Roblox user id, username, display name, account age, Premium status, and the country Roblox reports for the player.
- Each session's join and leave times, how they joined (search, friend, teleport…), and signals around leaving that work out a leave reason.
- Device type and screen size, frame rate, ping, idle time, which menus were open, and script errors.
- Gameplay events the developer chooses to send (for example quests, funnel steps, currency earned or spent, A/B test variants), and Robux purchases in the game.
RoSession doesn't collect chat messages, passwords, real names, email addresses, phone numbers, payment details or precise location. Players' devices never connect to RoSession: the game's server collects the data and sends it, so we don't receive players' IP addresses. Developers agree in our terms not to send that kind of personal information.
Public Roblox game stats
RoSession's public pages (the homepage, Games, Rankings and Compare) show information about Roblox experiences, from what Roblox shows publicly about each experience: names, descriptions, icons, genres, creators' public names and ids, and counts like playing, visits, favorites and likes, with RoSession's own snapshots of them over time.
It doesn't collect anything about individual players for these pages. If you ask RoSession to track a game, we keep a hashed form of your network address for a few days to limit how many games one visitor can add.
How it's used
- To show a game's analytics to its owner and the members they add, and to send the alerts they turn on.
- To run the service: keeping it secure, preventing abuse, fixing bugs, and site-wide totals (for example how many games are active).
- To answer you when you contact us.
We don't sell personal information, show ads, or use any of it for advertising. A game's data is never shown to other developers. RoSession's administrators can open any game for support and moderation.
How long it's kept
- Raw events, server heartbeats and errors: 30 days by default, shorter if storage runs low (never under 7 days).
- Sessions and servers: three times as long as raw events, at least 90 days.
- Daily totals and per-player totals: as long as the game exists on RoSession.
- Deleting a game deletes all of its data right away. Your account stays until you ask us to delete it.
Our providers may keep backups for a limited time after data is deleted.
Children
Many Roblox players are children. RoSession is a tool for developers, not for players, and it's built to avoid collecting contact details or anything that identifies a player outside Roblox. Developers are responsible for using it in line with Roblox's Terms of Use and Community Standards and the laws that apply to their game, including telling players or parents about analytics where that's required. If you're a parent and want a child's data deleted, see below.
Deleting your data
Developers can delete a game, and all of its data, in its Settings. To delete your account, or for a copy of the data tied to it, email hello@rosession.com from an address we can reply to, and include your Roblox username.
Players (or their parents) can ask the game's developer, or email us with the Roblox user id or username. We'll delete that player's data from every game on RoSession within 30 days, and confirm by email. Depending on where you live you may have other rights over your data; ask and we'll help.
Security
Traffic is encrypted (HTTPS). API keys are stored only as fingerprints, sign-in cookies are signed and can't be read by scripts, and the database isn't reachable from browsers. No system is perfectly secure, but if something goes wrong that affects your data, we'll tell you.
Changes and contact
If this policy changes, we'll update the date at the top, and tell signed-in developers about big changes. Questions: hello@rosession.com. RoSession is not affiliated with, endorsed by or sponsored by Roblox Corporation.