Privacy Policy
Last updated: November 6, 2026
The short version
The Windows app is local-only: your accounts, cookies and vault stay on your PC and are never sent to us. This website has no analytics and no advertising. The only data we ever hold is what the Discord verification step stores, and you can delete it at any time.
1. The Windows app
RoAccount encrypts your vault on your computer (Argon2id + AES-256-GCM). We do not receive your Roblox cookies, passwords, account names or any usage data. Optional features such as Discord alerts only send what you configure, to the webhook you provide.
2. This website
We do not use analytics, trackers or advertising cookies. The site is served through Cloudflare, which processes standard connection data (such as IP address) to deliver and protect the site. During Discord verification a short-lived security cookie (about 15 minutes) is used to prevent forged requests; it is removed after use.
3. Discord verification and member restore
If you choose to verify with Discord, you sign in on Discord’s own page and grant the identify and guilds.join permissions. We then store:
- your Discord user ID and username;
- an access token and refresh token, stored encrypted (AES-256-GCM);
- the server you verified in and the date.
This is used for two things only: giving you the Member role, and adding you back to the server if it is lost or rebuilt. We never read your messages, email or friends, never post as you, and never sell or share this data.
4. Delete your data
You can remove everything at any time: run /forgetme in the RoAccount Discord server. It deletes your stored data and revokes the tokens at Discord. You can also remove RoAccount’s access yourself in Discord → Settings → Authorized Apps → RoAccount → Deauthorize. If you cannot use Discord, open a ticket in the server and we will delete it manually.
5. Discord server and bot
The bot keeps a small amount of server data to work: levels and XP, suggestions, ticket transcripts (kept in the staff-only log channel), and moderation logs. Messages deleted by the anti-spam or trap channel features may be recorded in the staff-only mod log.
6. Children
Discord and Roblox require users to meet minimum age rules. We do not knowingly collect data from anyone below those ages.
7. Changes and contact
If this policy changes, the date above changes. Questions or requests: open a ticket in the Discord server.