Privacy Policy for RoLogin Chrome Extension
Last Updated: June 5, 2026
RoLogin ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, handle, store, use, and share information when you use the RoLogin Chrome Extension (the "Extension").
We believe in absolute transparency and data ownership. The Extension is designed to run entirely locally in your web browser. We do not run any remote tracking servers, analytics services, or centralized databases.
1. What Information We Access and Process
To provide its core functionality, the Extension accesses and processes the following information:
- Roblox Authentication Session Cookies (
.ROBLOSECURITY): Used to authenticate and switch between your Roblox accounts.
- Roblox Account Metadata (Username, User ID, and Avatar/Headshot): Used to identify and visually represent your accounts in the extension's user interface.
- Bloxgen API Key (Optional): If you use the optional Bloxgen account generator feature, the extension stores the API Key you provide to authenticate your requests to the Bloxgen service.
- Master Password: A user-defined password used to derive the local encryption key. This password is never stored anywhere; it is only held in memory during your browser session to decrypt your vault.
2. How Your Data is Handled and Used
All processing is performed strictly on your local device:
- Account Switching: The Extension reads and writes the
.ROBLOSECURITY cookie for the roblox.com domain to log you into different accounts.
- Roblox API Calls: The Extension makes direct API requests to Roblox servers (
https://users.roblox.com and https://thumbnails.roblox.com) to retrieve your profile picture and username.
- Bloxgen Account Generation (Optional): If you trigger the Bloxgen generation feature, the Extension sends your Bloxgen API Key to
https://core.bloxgen.net to request a new Roblox account. The returned credentials (username, password, and session cookie) are processed locally.
3. How Your Data is Stored
Security is our priority. Your data is stored locally in your browser's extension storage (chrome.storage.local):
- AES Encryption: All stored Roblox account data, including sensitive session cookies, is encrypted locally in your browser using AES (Advanced Encryption Standard). Decryption is only possible using the key derived from your Master Password.
- Local Storage: The encrypted vault is stored on your device. We have no backend server and cannot access, restore, or recover your accounts if you forget your Master Password.
- Bloxgen API Key: Stored locally in your browser's local storage to save you from re-entering it.
4. How Your Data is Shared
We value your privacy:
- No Third-Party Sharing: We never sell, trade, rent, or share your data, credentials, or cookies with any third party.
- Direct Connections Only: The Extension only communicates directly with:
- Official Roblox endpoints (
*.roblox.com) to manage sessions and fetch profile information.
- The Bloxgen service (
*.bloxgen.net) only when you explicitly request a new account generation.
- No Analytics/Tracking: The Extension does not collect telemetry, usage metrics, or error logs remotely.
5. Your Choices and Data Deletion
You have complete control over your data:
- Delete Specific Accounts: You can delete individual accounts from your vault directly inside the Extension popup.
- Wipe All Data: You can use the "Clear Vault" option in the Extension settings to erase all stored accounts, API keys, and configurations immediately.
- Extension Uninstallation: Uninstalling the RoLogin Extension from your Chrome browser will automatically and permanently delete all local storage associated with the Extension.
6. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be updated directly in this document and reflected in the "Last Updated" date.
7. Contact Us
If you have any questions, concerns, or feedback regarding this Privacy Policy, please contact us at:
- Developer Email: empfomat@gmail.com