Account and data use.

RoForge is an independent development tool for Roblox Studio. This page explains the information used by the app.

Your account information

Registration collects your username, email and chosen RoForge password. Your username and email appear in the authorized developer dashboard. Passwords are hashed with a unique salt and 600,000 PBKDF2-HMAC-SHA256 iterations. Readable passwords are never stored or sent to the developer. The server stores only hashes of session tokens.

Account creation and sign-in times, access status and admin actions are recorded. Temporary hashed network-address counters help limit abuse. This version does not verify email ownership or send automatic password reset emails.

Your games and chats

Game files, chats and attachments stay in your account workspace on your computer. They are not uploaded to RoForge’s account service. When you send a chat, text, prepared images or video frames and relevant game context are sent to your selected AI provider. That provider’s terms, charges and limits apply.

API keys and the RoForge session token are protected with Windows profile-bound DPAPI. Codex and other CLI providers use their own authentication. Creating a RoForge account does not create accounts with these providers.

Access and maintenance

The account-based release contacts the account service at startup and during use. The developer can temporarily pause an individual account or the whole app. This keeps game files intact. New operations stop if the internet or account service is unavailable.

About your account

Send account or data requests to the RoForge developer you received the app from. The admin dashboard never displays user passwords. Third-party tools have their own data policies.

For the developer overview, we record your account’s last activity time and reported application version. Your chats, project files and AI keys are not sent to this dashboard.