Reference
Security & privacy
What we store, and what we never touch.
- API keys are encrypted with AES-256-GCM, shown only as the last four characters, and never written to logs.
- We never ask for your Roblox password or cookie and never scrape the website.
- Every request is scoped to a workspace you belong to; other workspaces can’t see your connections or projects.
- Roles control who can manage connections, projects and members.
- Migrations copy data between your DataStores; we keep job metadata, not player payloads.
| Role | Can do |
|---|---|
| Owner | Everything, including managing owners |
| Admin | Members, connections, projects |
| Developer | Projects, DataStores, migrations |
| Viewer | Read-only |