privacy policy

Effective: December 30th, 2025

TL;DR - rotheme's website stores account data, the themes you've uploaded and page/theme analytics. The extension collects basic anonymous usage data; your themes and their names are never shared. We use Cloudflare on web.

rotheme ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what data we collect, how we use it, and how different categories of data are kept separate. By using rotheme's services, you agree to the practices described below.

1. Information we collect

When you create a rotheme account using Roblox OAuth, we collect account-related information, including:

Your Roblox username and nickname
Your Roblox user ID
Your avatar or banner image
Your public Roblox profile bio
Session and security data (such as IP address and User-Agent) used solely for authentication and abuse prevention

We also use limited cookies and local storage on the website to:

Maintain your login session
Store non-sensitive preferences (e.g., dismissed notices)

Separately, we collect anonymous usage analytics:

The rotheme website uses Umami to collect anonymous, aggregated website analytics (such as page views). These analytics do not include personal or account-identifiable information.
The rotheme browser extension sends anonymous feature-usage events (such as which general feature categories are used). These events do not include theme identifiers, browsing history, or account details.

2. Our analytics policy

rotheme is designed so that usage analytics and account data are intentionally kept separate:

Your extension's analytics is never linked to your rotheme account, Roblox account, or login session.
Analytics data is not used for authentication, authorization, or account-related requests.
We cannot determine how a specific account uses rotheme locally based on analytics data.

As of January 2025, the only information associated with your rotheme account is what is required to operate the service: uploaded themes, marketplace activity, and account session data.

3. How we use your data

We use collected data to:

Authenticate users and secure accounts
Enable theme creation, sharing, and marketplace functionality
Operate core website and extension features
Improve rotheme through anonymous, aggregated usage analytics

We do not sell or rent personal data. Data is only shared with infrastructure providers where required to operate the service (e.g. Cloudflare).

4. Cookies, local storage, and extension behavior

We use essential cookies and local storage to:

Remember authentication state
Store local extension and website preferences

We do not use advertising cookies or third-party tracking cookies.

5. Extension communication

The rotheme extension communicates with rotheme services to:

Verify extension installation status
Retrieve and apply your selected theme
Store theme data locally in your browser

The extension does not collect browsing history, page content, or unrelated website data.

6. Data retention

We retain account data until:

You request account deletion
Your account remains inactive for 3 years
Retention is required for legal or security reasons

Anonymous analytics data is retained in aggregated form and cannot be used to identify individual users.

7. Data hosting and security

rotheme services are hosted in the EU and protected using industry-standard security practices (TLS, access controls).

Cloudflare provides DDoS protection and caching and may temporarily process IP addresses as part of normal operation.

8. Your rights

Depending on your jurisdiction, you may have the right to:

Access personal data associated with your account
Request correction or deletion of your account data
Withdraw consent where applicable
Lodge a complaint with a data protection authority