Privacy Policy

1. Roblox information

When you authorize sign-in, we request the openid and profile scopes to obtain your Roblox ID, display name, username, and profile picture when provided. This information identifies your session and is displayed in the app. BrixyAI does not receive your Roblox password or request access to your email in this flow.

2. Session and cookies

We use a temporary cookie lasting up to 10 minutes to validate the sign-in callback and a session cookie lasting up to seven days. The session contains your profile and is signed to detect tampering. Cookies are HttpOnly, use SameSite=Lax, and use Secure over HTTPS. Sign out removes authentication cookies from this browser.

3. Conversations and attachments

Conversations are stored in browser localStorage, separated by Roblox account ID. When you send a request, the text and recent history are sent to OpenRouter and the selected model provider to generate a response. Only filenames are added when selecting files; file contents are not sent for analysis. Clearing site data deletes local conversations. Signing out does not automatically delete them.

4. External services and technical records

When credit management is active, we store your Roblox ID, name, username, profile picture, plan, access status, registration and last-access dates, and balance in Upstash Redis. Authorized administrators can adjust plans, credits, and bans; recent actions and reasons are logged for auditing. Temporary reservations record request cost and expiry without storing the prompt. Clearing browser data or signing out does not reset this balance. Roblox handles authentication and provides your profile. BrixyAI uses the access token during sign-in to retrieve the profile and does not persistently store it. Hosting infrastructure may process technical data such as IP addresses, requests, and error logs to operate the site. Roblox and Discord policies also apply when opening their links.

5. Control over your data

You can delete projects in the app, clear local data in browser settings, and sign out to end the local session. You can also manage or revoke BrixyAI authorization in Roblox settings. Revoking authorization on Roblox does not automatically terminate a BrixyAI session cookie already issued; use Sign out to remove it from this browser.

Project memory and Studio integration

Project notes, excerpts from recent completed conversations and plugin-reported test results are saved on the server, separated by project and protected by the owning account. This context is sent to the AI provider for future responses. You can clear memory in the Studio panel. Approved tasks retain script source and results for up to 30 days. Plugin tokens expire after 30 days and can be revoked with Disconnect.

Authorized administrators can review recorded requests, model, effort, outcomes and charged credits to audit platform usage. Agent tasks are available for up to 30 days; billing records are limited to the latest 200 per account.

Moderation and appeals

We keep the last two messages submitted to the AI for up to 30 days, with up to 6,000 characters per message. When an account is restricted, this record is preserved for review. Opening an appeal provides an image attachment available only to you and authorized staff. Attachment access ends when the conversation is closed.

Cookie preferences

Necessary cookies support sign-in, security and requested features. Your cookie choice is saved for up to 180 days. Optional analytics remain disabled until permission is granted; no advertising or analytics tracker is currently installed.

6. Privacy and contact

Avoid including passwords, tokens, and other sensitive information in prompts. For questions or requests about your data, contact the team in the Discord community, without posting sensitive information in public channels. This policy will be updated when new features change how data is handled.