Privacy Policy

Last updated: 2026-10-08

This page explains what data RoSocket stores about you and how it's used.

What we store

• Account info: your email address, a bcrypt hash of your password (never the password itself), and when your account was created.
• API tokens: a name you give the token, a short prefix (for display), a one-way hash of the token, and when it was created, last used, and revoked. The full token is only shown to you once, at creation.
• Audit log: account and token actions (logins, token creation/revocation, socket open/send/close) with a timestamp, the requesting IP address, the Roblox Place ID when supplied by Roblox, and details such as the target WebSocket URL and message counts/sizes.

What we don't store

Message contents sent or received over your sockets are held in memory only until your game server collects them, and are never written to disk or the audit log. We never store plaintext passwords or plaintext API tokens.

How data is used

Your data is used solely to operate the Service: authenticating you and your game servers, relaying your WebSocket traffic, and showing you your own audit log.

Site administrators can see account emails, API token metadata (names, prefixes, and usage times, never the tokens themselves), open socket URLs, and audit log entries for all accounts. They use this to moderate abuse and help with support. Admins can also revoke tokens, close sockets, reset passwords, and delete accounts. Actions an admin takes on your account are recorded in your audit log.

We don't sell your data

None of your data is ever sold, rented, or given to any third party. The only outbound traffic is the WebSocket connections your own game servers ask the Service to open.

Retention

Audit log entries are automatically deleted after the retention period configured by the operator (90 days by default).

Contact

Questions about this policy? Reach out on the Pyramus Discord or by email.

See also the Terms of Service.