Privacy policy

This policy explains how Rotility (“we”, “us”) handles personal data on rotility.com, in the Rotility API and in the Rotility hangout on Roblox. Two notices cover the rest: the Protility privacy notice (checkout, billing and email) and the Discord privacy notice (the bot and our server). The short version: we collect little, never ask for your Roblox password or cookie, run no ads or third-party trackers, and never sell data.

Who we are

Rotility runs rotility.com and decides how the personal data described here is used (under the GDPR, Rotility is the controller). Questions and requests about your data: [email protected].

Browsing the site

You don’t need an account to use Rotility. Our own analytics count each page view and store:

• the page’s address and, if you came from another site, that site’s domain;
• your country (from Cloudflare) and whether you’re on a phone or tablet;
• a visitor code: a one-way hash of your IP address and browser, mixed with a secret and the date. It lets us count unique visitors per day without storing your IP address, and it changes every day, so visits on different days can’t be linked.

We also store what people type into search, with nothing about who searched. Page views and searches are deleted after 90 days. When a page breaks, we keep the error, the page’s address and your browser’s name and version for 30 days so we can fix it. Your IP address is used in memory to rate-limit requests and isn’t saved (the one exception is the audit log of our own staff’s admin actions).

Item images, avatars and 3D previews load straight from Roblox’s servers, so Roblox receives those requests the same way it does on roblox.com.

Signing in with Roblox

Signing in is optional, and there are two ways to do it:

• Roblox’s official sign-in (OAuth 2.0) with two permissions, openid and profile, so Roblox shares your user ID, username, display name and avatar. The access token Roblox issues is used once to read your profile and then discarded.
• A one-time code you put in your Roblox profile’s About section. We read your public profile to check the code is there and don’t keep the About text.

Either way we never see your password and can’t do anything on your account. We store:

• your Roblox user ID, username, display name, avatar link, and when you first and last signed in;
• the items and players you pin to your quicklinks;
• your session, kept as a hash of the token in your cookie, for 30 days or until you sign out;
• developer API keys you redeem (only their hashes), with request counts.

Signing in also adds your Roblox account to the player tracker below; that’s what your profile page shows.

What you add while signed in

• Item tags (not for trade, upgrading, downgrading) and what you’re asking for an item: shown on your player page.
• Your wishlist: shown on your player page. Protility members who own an item on it can see that you want it, with your inventory’s value.
• Trade ads: shown publicly with your Roblox name until they expire, and deleted 30 days after that.
• Stream overlays, if you’ve been invited: each overlay’s settings and the secret token in its link.

Public Roblox data about players

Player pages, the leaderboard and the trade feed are built from data Roblox makes public: user IDs, usernames and past usernames, display names, avatars and outfits, profile badges such as Premium, whether an account is online, and the limited items in public inventories. We collect it through Roblox’s public APIs and check inventories over time, which records when copies move between accounts. The invite-only developer API serves the same data the site shows. For the years before we tracked someone, value charts can also show the inventory totals (value, RAP, number of limiteds) that Rolimons publishes on its public player pages, imported with Rolimons’ permission.

If your Roblox inventory is private, we can’t read it. Your player page still shows what Roblox makes public anyway: copies you list for resale, limiteds on your avatar, and copies you held while your inventory was public, until Roblox’s public record for each copy shows it changing hands. Signed in, you can choose “Keep me off watchlists and alerts” on your player page to keep those sightings, watchlists and tracking alerts off it. To have the history we already stored about your account deleted, email [email protected]; we’ll ask you to show the account is yours.

That includes resale listings (who listed which copy, at what price, for how long and how it ended), kept so listing history stays complete, and what players wear: each distinct avatar look and each version of their saved outfits, item by item, kept when they change or delete them. Players who opt out of tracking aren’t logged this way, and their listings show without their name.

We do this in our legitimate interest, and the trading community’s, in accurate public values and trade history. Sightings of listings and of items being worn are deleted 90 days after they end, and tracking alerts after 120 days; inventories, trades, names, values and looks are kept as history. You can object at any time (see “Your rights”).

Sales on resale shops

For dollar values and the dollar sales list, Rotility records sales that resale shops (ro.place and Adurite) publish: the item, the price, the shop and when it sold or was first seen. We don’t record who bought or sold, and keep these records as market history.

Stolen item reports

If you report items taken from your account, we store the report: the trade from our own records, the copies, what you write and any links you add, and later what staff and anyone appealing do with it. The account that got the copies, anyone holding one of them, and staff can read what you wrote; everyone else sees only the trade figures, the copies, their status and the timeline, and only once a report is approved. Appeals are stored and shown the same way. Reports stay on record after they close, because the copies’ history depends on them; email us to have your statement removed.

The Rotility hangout

In our Roblox experience you can choose to share your inventory. Roblox shows its own prompt first; if you allow it, the game checks each limited with Roblox and sends us your user ID, username, display name, the limiteds you own and when you got each copy. We show them on your player page, count them toward your value and leaderboard rank, and record changes when you share again. Stop sharing in the game or on the hangout page and we delete what you shared and the value history recorded from it.

Community polls

When you vote in a community value poll, on Discord or on the poll’s page, we store your ballot (the value, when you cast it and how often you changed it), where you voted, a random receipt code, your Discord user ID and/or Roblox user ID so each person counts once, and whether that Roblox account owned the item, which only feeds the owners-versus-others numbers. To keep alts out we check how old your Discord account is and how long you’ve been in the server (neither is stored), and your Roblox account’s age from its public profile. On the website we also store a hash of a random voter cookie, so one browser casts one ballot.

While a poll is open nobody sees your ballot. When it closes, every ballot is published on the poll’s page by receipt code and value, with no account attached, so you can check yours was counted. Staff can see which accounts voted, and what they voted once the poll has closed, to catch alts. If an account is banned from voting we keep its ID, the reason and the ban’s dates.

Rep

When you give a player rep, we store your Roblox user ID with theirs and when you gave it, and show your Roblox name among the people who vouched for them. To count people rather than accounts we also keep a keyed hash of your IP address and of the random rt_voter browser cookie (never the address or cookie itself), and check your Roblox account’s age and that Rotility has seen a limited in its inventory. Taking your rep back deletes it.

Human checks

Posting a trade ad, getting a sign-in code for your About section, your first ballot in a poll, reporting a stolen item or appealing a report, redeeming an invite, and your first rep each month ask for Cloudflare’s human check (Turnstile). It runs in a Cloudflare frame on that form only; we send Cloudflare its result and your IP address to confirm it, and store only when your account last passed (for rep).

Emailing support

When you email [email protected], we keep your address, your name as your email shows it, and the text of the conversation, which staff follow on Rotility and in a private staff channel on our Discord server; attachments stay in the mailbox and aren’t copied. The Rotility AI reads the text of support emails to answer common questions or draft an answer for staff, and its replies say so. Reply “human” at any time and a person takes over. It sees only the conversation, never your Rotility account. We keep support conversations while they’re useful for helping you and for follow-ups; ask and we’ll delete yours.

Protility and Discord

Checkout, billing, the address we send billing notices and daily reports to, and Protility’s settings are covered in the Protility privacy notice. Linking accounts in Discord, /watch, proof and value channels, moderation and tickets are covered in the Discord privacy notice.

Cookies

Only these, and only when you sign in, vote, give rep or pick a layout or currency:

• rt_oauth holds the Roblox sign-in handshake for 10 minutes;
• rt_verify holds an About-section code sign-in for 15 minutes;
• rt_session keeps you signed in for 30 days;
• rt_accounts remembers the other accounts signed in on this browser, so you can switch between them;
• rt_voter is a random code set when you first vote in a poll or give rep on the site, so one browser casts one ballot per poll and one rep per player. We keep only its hash.
• rt_layout remembers whether you picked the list or the grid on pages that have both.
• rt_currency remembers the currency you picked for dollar values, for a year.

No advertising or tracking cookies, and no third-party scripts apart from Cloudflare’s human check on the forms that ask for one.

Why we use data

• To give you what you ask for (signing in, your account and what you add to it, polls, rep, reports, the hangout, support and Protility): to carry out our agreement with you.
• To build public player and item history from Roblox’s public data, count visits, stop abuse, alts and fraud, keep Rotility secure and improve it: our legitimate interests in running an accurate, fair and safe values site. You can object to these.
• Sharing your inventory from the hangout: your consent, which you withdraw by stopping sharing.
• Keeping records the law requires and answering lawful requests: our legal obligations.

How long we keep it

• Page views and searches: 90 days.
• Sessions: 30 days, or until you sign out. Sign-in codes: until they expire.
• Your account and what you add to it: until you remove it or delete your account. Trade ads go 30 days after they expire; rep goes when you take it back.
• Public player history: as described under “Public Roblox data about players”.
• What you share from the hangout: until you stop sharing.
• Poll ballots stay with their poll; voting bans are kept with their reason and dates. Stolen item reports stay on record after they close.
• Support emails: as described under “Emailing support”.
• Protility and Discord data: as described in their notices.

Who else handles data

• Roblox: sign-in, public player and item data, images, and the hangout experience.
• Heroku (Salesforce): hosts the site and its database in the United States, with short-lived request logs that include IP addresses.
• Cloudflare: DNS and network; it sees IP addresses to deliver and protect the site, and runs the human check on the forms that ask for one.
• Whop: takes Protility payments and runs the billing page, under its own privacy policy.
• Google Workspace: sends Rotility’s emails from [email protected], receives bounce notices, and hosts the [email protected] support inbox.
• Discord: runs the bot, its polls and the proof and value channels, and the private staff channel where we follow support emails.
• Groq, our AI provider: runs the Rotility AI, which reads the text of messages from Discord proof and value channels, plus item market data, to propose item values, and the text of support emails to answer them. Groq processes it for us and by default doesn’t keep it (at most 30 days, if needed to look into errors or abuse). It gets nothing about Rotility accounts or visitors.

We don’t sell or rent data or share it with advertisers, and account, sign-in and browsing data never go to an AI service. We may disclose data if the law requires it, to protect someone’s safety, or to whoever takes over running Rotility, who would have to keep to this policy.

Data outside your country

Rotility is run from the United States, where its database and most of the services above are. If you use Rotility from elsewhere, your data goes to the US, whose laws may protect it less than yours. For data from the EU, the UK and Switzerland we rely on the safeguards those services offer, such as the European Commission’s standard contractual clauses or the EU-US Data Privacy Framework.

Your rights

Wherever you live, you can ask us to:

• tell you what personal data we have about you, and give you a copy in a format you can reuse;
• correct it;
• delete it;
• stop or limit using it, including the public history we build from Roblox’s data;
• stop relying on your consent, where we use it.

Email [email protected], or open a ticket on our Discord. We’ll check the account is yours, for example with a code in your Roblox About section or a message from your Discord account. Someone else can ask for you if you authorize them; we’ll ask for proof. We answer within a month (45 days where US state law allows that) and tell you if we need longer. If we turn a request down, we’ll say why, and you can appeal by replying. If you’re still unhappy, you can complain to your data protection authority, or in the US to your state’s attorney general. Using these rights never costs you anything or changes how we treat you.

US state privacy laws

In the past 12 months we collected these categories of personal information: identifiers (Roblox and Discord user IDs and names, email addresses, and hashed IP addresses); commercial information (Protility plans); internet activity (page views and searches, not tied to you); approximate location (your country); and what you send us. Where it comes from, why we use it and who receives it are described above. We don’t sell personal information or share it for cross-context behavioral advertising, including that of anyone under 16, and we don’t use sensitive personal information to infer things about you. We treat a Global Privacy Control signal as a request to opt out, though there’s nothing to opt out of.

Automated decisions

We don’t make decisions with legal or similarly significant effects on anyone by automated means alone. The Rotility AI values items, not people. The bot’s automatic moderation is explained in the Discord privacy notice, and a person reviews it on request.

Security

Sessions, API keys and voter cookies are stored only as hashes, every connection is encrypted, and only the staff who need data can reach it. No system is perfectly safe; if a breach puts your data at risk, we’ll tell you, and the authorities where the law requires.

Deleting your data

• Signing out ends your session right away.
• Deleting your account removes it along with your sessions, quicklinks, item tags, wishlist, trade ads, the rep you gave, Protility settings and lists, stream overlays, saved email address and Discord link, revokes your API keys and cancels any Protility subscription, right away and for good. Signing in again later starts a fresh account.
• Ballots you cast stay with their polls, and stolen item reports stay on record.
• For player history, see “Public Roblox data about players” above.

Children

Rotility is for people 13 and older. If you’re younger, please don’t sign in, share your inventory from the hangout or use the Discord bot. If we learn we’ve collected data from someone under 13, we delete it. Player pages can show public Roblox data about players of any age, because Roblox makes it public; a parent or guardian can email us to have a child’s history removed.

Changes

If we change how we handle data, we’ll update this page and the date at the top. For important changes we’ll also announce them on the site, and email Protility members, before they take effect.

Contact

Questions or requests about your data: [email protected]. You can also reach us on Discord. The rules for using Rotility are in the terms of service.