Privacy Policy

What we collect and why

When you sign in with Roblox

Rofinds uses Roblox's OAuth 2.0 login (the openid and profile scopes). When you authorise the connection, we receive and store:

• Your Roblox user ID — a stable numeric identifier assigned by Roblox
• Your Roblox username — the display name shown on your Roblox profile

That is the full extent of what we receive from Roblox. We do not receive or store your email address, password, friends list, inventory, purchase history, Robux balance, or any other Roblox account data.

When you use the site

• Reviews you post — your P2W rating, written comment, and the date you posted are stored and displayed publicly alongside your Roblox username.
• Game suggestions you submit — the game ID, name, and your written reason are stored and visible only to the site owner for moderation purposes. They are not displayed publicly.

Standard server logs

Like any web service, our hosting infrastructure may log IP addresses and browser user-agent strings for security and debugging. These logs are not linked to your Roblox account and are not retained beyond normal operational windows.

How we use your data

• To display your Roblox username next to reviews you leave on the site.
• To associate your account with reviews you submit, so you can be identified as the author.
• To let you log in on return visits without creating a separate password.

We do not use your data for advertising, analytics sold to third parties, or any purpose not described in this policy.

What we do not do

• We do not sell your data to anyone.
• We do not share your data with third parties, except for the infrastructure providers needed to operate the site (database hosting, web hosting).
• We do not use your data to train AI or machine-learning models.
• We do not build behavioural profiles or track you across other websites, and we do not use any third-party profiling services on Roblox users.
• We do not send marketing emails. We have no way to — we don't collect your email address.

Roblox API access and data deletion

Rofinds connects to Roblox's platform via OAuth 2.0. If that connection is ever revoked — whether by you, by Roblox, or because Rofinds loses access to the Roblox API — we will expunge all Roblox-derived data associated with your account (your Roblox user ID and username) from our systems within 30 days.

Reviews you posted will either be anonymised (your username removed) or deleted entirely at that point, depending on the reason for revocation.

Data storage

Your data is stored in a database hosted by Supabase. Supabase operates infrastructure in the United States. By using Rofinds you acknowledge that your data may be processed there.

Your rights

You can request a copy of your data, ask us to correct it, or ask us to delete it at any time. To make a request, email us at rofinds.contact@gmail.com. We will delete your data within 30 days of receiving a verified deletion request.

You can also revoke Rofinds' access to your Roblox account at any time through your Roblox account settings under Connected Apps.

Children's privacy

Rofinds does not knowingly collect data from children under 13. Because Roblox has its own age-verification and parental-consent mechanisms, we rely on Roblox's OAuth flow to enforce those constraints. If you believe a child's data has been collected without appropriate consent, please contact us and we will delete it promptly.

Changes to this policy

If we make material changes to this policy, we'll update the "Last updated" date at the top of this page. Continued use of Rofinds after a change constitutes acceptance of the updated policy.

Roblox platform compliance

Rofinds operates in compliance with Roblox's Creator Third Party App Policy and Roblox's OAuth 2.0 developer terms. We request only the minimum scopes necessary for the app's core function (displaying your Roblox username next to your reviews). We do not request scopes for inventory, friends, purchases, or any other Roblox account data.

If Rofinds is ever sold, transferred, or undergoes a change of control, we will notify Roblox Corporation in advance, in accordance with the Creator Third Party App Policy.